Legal • Thailand PDPA Compliant
Privacy Policy
Effective Date: August 1, 2026 • PhuketLocal Travel (Phuket, Thailand)
1Overview & Data Controller
PhuketLocal Travel ("PhuketLocal", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in strict compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information when you visit our website at PhuketLocal.com, book experiences through our platform, subscribe to our newsletter, or contact us via our inquiry forms.
2Information We Collect
We only collect personal information that is directly necessary to process your travel reservations, respond to your inquiries, and provide customer assistance:
- Booking Information: Full Name, Email Address, Phone / WhatsApp Number, selected tour activity, date of experience, number of guests (adults/children), and hotel pickup location.
- Contact Inquiries: Full Name, Email Address, subject, and message content submitted via our Contact Us page.
- Newsletter Subscription: Email Address provided when subscribing to our travel newsletter for updates and offers.
- Communication Records: Special dietary requirements, boat transfer notes, or follow-up messages submitted via WhatsApp or email.
3Purpose & Legal Basis of Processing
Your data is processed under the following lawful bases specified in the PDPA:
- Contractual Performance: Processing and issuing your tour reservation, hotel pickup coordination, and sending booking confirmations.
- Safety & Vessel Manifests: Sharing guest counts and names with licensed local operators and sanctuary hosts for tour safety compliance.
- Customer Support: Responding to inquiries and updating you on tour timing changes due to weather or tide conditions.
- Marketing Communications: Sending travel guides, offers, and updates to email addresses voluntarily submitted through our newsletter signup. You may unsubscribe at any time.
4Data Protection & Third-Party Sharing
We enforce strict confidentiality standards:
- Zero Data Sales: We NEVER sell, trade, or rent your personal information to third-party marketing brokers.
- Verified Partners Only: Information is shared exclusively with the verified local operator handling your reserved activity solely for tour execution and safety.
- Encrypted Storage: Data stored in our database is secured behind industry-standard encryption and firewall access controls.
- Cross-Border Processing: Your data may be processed on secure cloud infrastructure located outside Thailand. We ensure that any such transfers maintain data protection standards equivalent to the PDPA.
5Cookies & Essential Tracking
Our website uses only essential cookies required for core platform functionality, such as authentication sessions for our administrative dashboard. We do not use third-party advertising cookies, behavioral tracking pixels, or retargeting technologies.
6Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Booking Records: Retained for 12 months after your tour date for customer support, dispute resolution, and accounting purposes.
- Contact Inquiries: Retained for 6 months after the inquiry is resolved.
- Newsletter Subscriptions: Retained until you unsubscribe or request deletion.
After the retention period, personal data is securely deleted or anonymized upon request.
7Your Rights Under PDPA
Under Thailand's PDPA, you possess the following rights regarding your personal data:
- The right to access and receive a copy of your personal data held by us.
- The right to correct or update inaccurate personal details.
- The right to request deletion or destruction of your personal data.
- The right to withdraw your consent at any time.
- The right to object to the processing of your personal data for marketing purposes.
- The right to data portability - to receive your data in a structured, commonly used format.
- The right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your data rights have been violated.
8Contact Us for Privacy Requests
To exercise any of your data rights, or if you have questions about our privacy practices, please contact our Data Controller:
This policy may be updated from time to time. The revised version will be posted on this page with an updated effective date.