Privacy Notice (Thailand PDPA)
Data controller: บริษัท เมดิเฮิร์บ จำกัด (ทริป ดีเอ็นเอ / TRIP DNA) · 378 หมู่ที่ 1 ตำบลกระโสบ อำเภอเมืองอุบลราชธานี จังหวัดอุบลราชธานี 34000 · Tax ID 0345562002482 · Tourism business licence 52/00629 (ในประเทศ, ถึง 13 ส.ค. 2571). Privacy contact: Contact channels will be listed here once activated.
What we collect when you book
Lead traveller name, email, phone, travel date, number of adults and children, seating zone, amount paid, the payment provider's reference, and evidence that you accepted our terms (terms version, time and language). We never store card numbers or bank account details.
Why we use it
To hold seats, take payment, confirm your booking, send the passenger list to the boat operator, contact you about your trip, process refunds and meet accounting and tax duties (contract and legal obligation). Messages typed into the AI chat are used only to answer questions and can never confirm prices, seats or bookings.
Who receives it
The boat operator you booked (name, phone and party size) and processors needed to run the service: database and hosting (Supabase, Vercel), payment (Opn/Omise or Stripe), email (Resend) and the AI provider for chat. Some process data outside Thailand under contractual safeguards.
How long we keep it
Paid bookings and financial records are kept for the period required by Thai accounting and tax law. For holds that expired or were cancelled without payment, name, email and phone are deleted automatically after 180 days.
Your rights
You may request access, a copy, correction, deletion, objection or withdrawal of consent by contacting Contact channels will be listed here once activated., and you may complain to Thailand's Personal Data Protection Committee (PDPC). Without a name, email and phone we cannot take an automatic booking.
Last updated: 12 October 2026