Privacy policy

Last updated: 29 September 2026.

Who we are

Deniz Thai organises tours and excursions in Phuket, Thailand ("we", "us"). We are responsible for the personal data described in this policy. Contact: denizthai4@gmail.com, WhatsApp +66 95 105 9382.

What data we collect

  • When you tap "Book on WhatsApp": the form sends one tour, your choices, date, guest counts, first and last name, and optional hotel and room to our server, which records the request with a reference number and opens WhatsApp with a prepared message. We also receive what you then send us in the WhatsApp chat. The tour form does not ask for a phone number or email.
  • In the WhatsApp chat: what you share with us there (for example your name, phone number, hotel and room number for pickup).
  • If you use the contact form: your name, email address and message.
  • Technical data: basic server logs (IP address, browser type, pages requested, time) kept for security and to fix errors.

If your travel agency registers: the company name, country, address, website and registration number, the contact person's name, phone number and email, your message, a password and the time you accepted this policy. The password is stored only in a protected (hashed) form that nobody can read. We use these details to review the application and to run the agency account.

We do not ask for card details. We never ask for payment card numbers on WhatsApp.

Why we use it

  • To arrange the tours you ask for: checking availability, confirming, organising pickup and contacting you about changes (performance of a contract).
  • To answer your questions (legitimate interest).
  • To keep the website secure and working (legitimate interest).
  • To meet legal and accounting obligations (legal obligation).

We do not sell your data and do not use it for advertising.

Who we share it with

  • The boat, tour or show operator that runs your tour, and transfer providers, only what they need (for example name, number of guests and hotel for pickup).
  • WhatsApp (Meta), because you contact us through it; WhatsApp's own privacy policy applies to the chat.
  • Our hosting and email providers, who process data on our behalf.
  • Authorities, when the law requires it.

Some of these providers may store data outside Thailand. We use providers that protect personal data to a standard comparable to Thai law.

How long we keep it

Booking details you send us are kept as long as needed for your tour and for accounting obligations. Agency account details are kept while the agency account exists; write to us to have them deleted. Server logs are deleted after a short period, unless needed to investigate a security incident.

Your rights

Under Thailand's Personal Data Protection Act (PDPA) you can ask us to access, correct, delete or transfer your data, object to or restrict its use, and withdraw consent where we rely on it. Write to denizthai4@gmail.com. You may also complain to Thailand's Personal Data Protection Committee.

Cookies

We use browser storage for your language and currency choice and the details you type while booking (kept in your browser only until you close the tab). When an agency registers or signs in, we set a security cookie, and a signed-in agency gets a session cookie that keeps it signed in for up to 12 hours. We do not use advertising or analytics cookies.

Changes

We may update this policy. The date at the top shows the latest version.