Who is responsible for your data
The data controller is VIP Luxury Services Co., Ltd., 21/1-2, 2nd floor, Royal City Avenue, Bangkok 10310, Thailand. ThailandWiki is a brand of this company. Send any privacy question or request to info@vipluxuryservices.com with "Privacy" in the subject line. Our privacy contact handles every request.
This page is a plain-English summary of how we handle personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). It was last updated on 3 November 2026.
What we collect
We collect only what we need to answer you and to run the site. Most of it you give us yourself.
- The Plan it with Tanner form: your name, contact details, dates, group size, budget range and message. We also record the form language, the page you came from and the time you sent it.
- Chat and messages: what you write to us in the website chat (Crisp), on WhatsApp, on WeChat or by email.
- Call bookings: your name, email and chosen time when you book a call through Cal.com.
- Trip details: for a confirmed booking, what suppliers need, such as guest names, flight times, passport details and dietary needs.
- Site use: with your consent, pages visited and device type through Google Analytics 4. We also record ad click IDs from Google and Meta, which show which advert brought you here.
We do not ask for payment details on this site. Please do not send us sensitive data, such as health information, unless a booking needs it.
Why we use it and the legal basis
We handle personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019), known as the PDPA. The Act came fully into force on 1 June 2022, the Department of Lands notes. The Personal Data Protection Committee and its office oversee it, the Government Public Relations Department says. We rely on three legal bases.
- Contract: to answer your enquiry, prepare an estimate and deliver a trip you book.
- Consent: for analytics and advertising cookies, which you can refuse or withdraw at any time.
- Legal duty: to keep accounting and tax records, and to give guest details to hotels or authorities where Thai law requires it.
We follow up on an enquiry you sent us, but we do not add you to a mailing list. We do this because you asked us to plan or quote something, a step you requested before a contract. Answering your enquiry is also in our legitimate interest. You can tell us to stop at any time.
Who we share it with
We share personal data only with companies that help us run the site or deliver your trip. Service providers process it on our instructions: Lovable (website hosting), Crisp (chat), Google (analytics and advertising), Meta (advertising), Cal.com (call booking) and our email service. When you book, we share only the details a hotel, driver or boat needs to deliver your booking. We update this list when it changes.
When you book a trip, we pass the needed details to the hotels, villas, yachts, drivers and venues in your plan. We pass them only for that trip. If you follow a link to another website, you leave our site, and that site's own privacy policy applies. We disclose data to authorities only when the law requires it.
International transfers
Some of our service providers store or process data outside Thailand, for example on servers in the United States or Europe. Where this happens, we rely on the safeguards the PDPA allows. These are the provider's data protection terms with standard contractual clauses, or your consent. Or the transfer is needed to carry out a booking you asked for.
How long we keep it
We keep data only as long as we need it. Enquiries that do not become bookings are kept for 1 year after our last contact. Booking records are kept for 5 years, as Thai accounting law requires. Chat history is kept for 1 year. Analytics data is kept for up to 14 months, the longest setting in Google Analytics, and then deleted automatically.
Your rights
You can ask us to show you the data we hold about you, to correct it, to delete it or to stop using it. You can object to how we use it, ask for a copy in a common format and withdraw your consent at any time. To make a request, use the details on our contact page.
We may ask you to prove who you are before we act. We reply to every privacy request within 30 days, as the PDPA requires. If you are not happy with our answer, you can complain to Thailand's Personal Data Protection Committee (PDPC).
Cookies
Cookies are small files that a website stores in your browser. When you first visit, a banner asks for your choice. Essential cookies always run; analytics and advertising cookies run only if you accept them.
- Essential: keep the site, the form and the chat working, and remember your cookie choice and form language.
- Analytics: Google Analytics 4 counts visits and shows which pages help readers.
- Advertising: Google and Meta measure which adverts lead to enquiries.
You can change your choice at any time through the "Cookie settings" link in the footer, or by clearing cookies in your browser. The cookie settings panel lists every cookie we use, grouped as strictly necessary, analytics and advertising. It shows what each one does and how long it lasts.
Changes to this policy
This version is dated 3 November 2026. When we change the policy, we update this date and describe important changes at the top of the page. See also our terms of use and our editorial policy.