01Data controller

Boat Trip (Thailand) Co., Ltd., TAT licence 34/03754, 79/29 Moo 4, Koh Kaew, Muang Phuket, Phuket 83000, Thailand, is the data controller. For anything about your personal data contact [email protected] or call +66 61 172 5854 (daily 09:00–21:00 Thai time).

02Data we collect

1. What you enter in the quote / booking form

• Name and phone number or LINE ID (required).
• Email and WhatsApp number (optional).
• What you are interested in – boat, program or activity, travel date, time slot, number of adults and children.
• Your message – anything you write, e.g. a celebration, pick-up hotel or a food allergy.
• Your choice about offers – whether you agreed to receive promotions, and when.

2. What we receive while arranging your trip

• Conversations with our team by phone, LINE, WhatsApp or email, and notes our team makes about your request.
• Passenger details for insurance – names and, where the insurer or authorities require it, passport or ID numbers and nationality.
• Payment records – bank transfer slips and references. We never ask for or keep full card numbers; card payments are handled by the bank or payment provider.
• Pick-up and service details – hotel, flight or arrival time, and extra services you book.

3. Recorded automatically with your request

• IP address and browser / device type – to stop spam and repeated automated requests, and to protect the form.
• How you found us – the referring website, landing page, campaign tags (utm_*), ad click IDs (gclid, fbclid), number of visits and pages viewed, and up to 8 boats you looked at. This is kept in your own browser (see section 4) and sent only together with a request you choose to send.
• Site language you used, which is also the language our team replies in.

4. Browser storage and visit statistics

• Saved in your browser only – your cookie choices, favourite boats, recently viewed boats and the "how you found us" data above. We cannot read these unless you send a request. Details are on the Cookie Preferences page.
• Visit statistics without cookies – for each page view we count the page, the traffic source, the device type (mobile / desktop) and the language. No cookie, no visitor ID and no IP address is stored for these statistics.
• Google Analytics and Meta Pixel – only if you accept analytics or marketing cookies. These services set their own cookies (_ga, _fbp, …).

03Sensitive data

We do not ask for sensitive data such as health, religion or beliefs. If you tell us something so we can look after you properly – a food allergy, seasickness, pregnancy or mobility needs – we use it only to arrange the service and keep you safe on board. You give your explicit consent by telling us, we share it only with the captain, crew or provider who needs it, and you can ask us to delete it at any time.

04Why we use your data and on what legal basis

If you do not give the required details (a name and a way to reach you) we cannot reply or arrange a booking. We make no automated decisions with legal effect on you; request scoring only helps our team reply sooner.

05Who we share data with

We never sell personal data. We share only what is needed with:

• Boat owners, captains and crew operating your charter, and providers of extra services you book (transfers, catering, DJ, guides).
• Insurance companies covering passengers.
• Banks and payment providers.
• Service providers that run our systems, only on our instructions: server and database hosting; LINE (alerts to our sales team and LINE Official Account chats); WhatsApp / Meta when you chat with us there; email providers.
• Google and Meta for analytics and ad measurement – only with your consent.
• Services that load parts of the page and therefore see your IP address and browser: Google Fonts (typefaces) and CARTO / Esri (map tiles on boat pages).
• Authorities such as the Marine Department, Tourism Department, police or courts when the law requires it.

The automatic translation used on this website handles articles and boat information only; no customer data is sent to it.

06International transfers

Some providers, such as LINE, Meta (WhatsApp, Facebook), Google, CARTO and Esri, may store or process data outside Thailand. We use providers with appropriate data protection standards and transfer data under sections 28 and 29 of the PDPA – to perform our contract with you, with your consent, or under the provider's data protection terms.

07How long we keep data

After these periods we delete or anonymise the data, unless we need it to establish or defend legal claims.

08Your rights

• Access your data and get a copy, and ask how we obtained it.
• Correct data that is wrong or incomplete.
• Delete or anonymise your data.
• Restrict or object to processing, including processing based on legitimate interest and direct marketing.
• Data portability – receive your data in a common format or have it sent to someone else.
• Withdraw consent at any time – for offers, tell us or reply "stop"; for cookies, change the Cookie Preferences page. Withdrawing does not affect what was done before.
• Complain to the Office of the Personal Data Protection Committee (PDPC).

Send requests to [email protected], or via LINE or phone. We may ask you to confirm your identity first, and we reply within 30 days free of charge. If the law lets us refuse a request, we will tell you why.

09Security

• All connections to the website are encrypted (HTTPS).
• Only staff who need it can see customer data. Passwords are stored hashed, administrator accounts must use two-step verification, and sign-ins and changes to data are logged.
• The booking form is protected against spam and automated attacks (rate limits, link and email checks).
• We choose providers with recognised security standards.

If a personal data breach happens, we notify the PDPC within 72 hours of becoming aware of it, and tell you without delay if it is likely to put your rights at high risk, as the law requires.

10Children

Booking requests must be made by adults (20 or older under Thai law). Details of children on board come from their parent or guardian and are used only for insurance and safety.

11Cookies and browser storage

The full list of cookies and browser storage, with how long each is kept, is on the Cookie Preferences page, where you can switch analytics and marketing cookies on or off at any time.

12Changes to this policy

We may update this policy when our systems or the law change. The latest version is always on this page with its date. For important changes we will tell you on the website and ask for consent again where the law requires.