Your Privacy Rights (PDPA)
Under Thailand's Personal Data Protection Act (PDPA), you have comprehensive rights to control your personal data.
1. Right to Access
You have the right to request a copy of all personal data we hold about you.
What you can request:
- Account information and profile data
- Booking history and payment records
- Messages and communications
- Usage data and activity logs
2. Right to Rectification
You can correct any inaccurate or incomplete personal data.
How to update:
- Edit your profile directly in account settings
- Contact support for data you cannot edit yourself
- We will verify and update within 30 days
3. Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data, subject to legal requirements.
Important notes:
- Account data deleted within 30 days
- Some data retained for legal compliance (7 years for financial records)
- Anonymized data may be retained for analytics
4. Right to Restriction
Limit how we process your data in certain circumstances.
When applicable:
- While verifying data accuracy
- When processing is unlawful
- For legal claims
- Waiting for objection assessment
5. Right to Data Portability
Receive your data in a structured, machine-readable format.
Export formats:
- JSON for structured data
- CSV for tabular data
- PDF for documents
- Transfer directly to another service (when possible)
6. Right to Object
Object to processing based on legitimate interest or for direct marketing.
You can object to:
- Marketing communications (instant effect)
- Profiling for marketing
- Processing for research purposes
- Processing based on legitimate interest
7. Right to Withdraw Consent
Withdraw your consent at any time for processing based on consent.
How to withdraw:
- Unsubscribe from marketing emails (one click)
- Update consent preferences in account settings
- Contact [email protected]
- Previous processing remains lawful
How to Exercise Your Rights
To exercise any of these rights, contact us at:
Response Time:
30 days
From receipt of request
Verification:
We may request ID verification to protect your data