[PLACEHOLDER: template text — requires review by a qualified lawyer before publishing]
Privacy Policy
Last updated: [date]
This policy explains how PKG Journey Thailand ([PLACEHOLDER: registered company name and address]) ("we", "us") handles personal data collected through this website. We aim to comply with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, for visitors in the European Economic Area and UK, the General Data Protection Regulation ("GDPR").
Data we collect
- Inquiry data you submit in our forms: company, name, country, email, phone/WhatsApp number, business type, trip details, special requirements (which may include dietary, accessibility or religious preferences) and your message.
- Campaign data: if you arrive from a link with campaign tags (UTM parameters) or another website, we record that source with your inquiry.
- Usage data: we use Plausible Analytics, which measures visits without cookies and without collecting personal data or persistent identifiers.
Why we use it, and our legal basis
- To respond to your inquiry and prepare proposals and quotations: steps taken at your request before entering a contract, and your consent.
- To operate travel services you confirm: performance of a contract.
- To understand which marketing channels work: our legitimate interests, using aggregated data.
Special requirements such as dietary or accessibility needs are used only to plan your travel and are shared only with the suppliers who need them.
Sharing
We share data with service providers who help us run this website and respond to you (website hosting, form delivery, email), and, when you confirm a booking, with the travel suppliers who deliver your services (hotels, transport and activity operators). We do not sell personal data.
International transfers
Our service providers may process data outside Thailand or your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
Retention
We keep inquiry data for [PLACEHOLDER: retention period, e.g. 24 months] after our last contact, unless a longer period is required by law or for a confirmed booking.
Your rights
Under the PDPA and GDPR you may ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. You may also complain to Thailand's Personal Data Protection Committee or your local data protection authority.
Contact
For privacy questions or requests, email globalpartner@pkgjourney.com. Data Protection Officer (if appointed): [PLACEHOLDER: DPO contact]