Personal Data Protection Policy
Tong A Travel Co., Ltd. places great importance on protecting users' personal data. We will collect, use, and disclose personal data in accordance with the Personal Data Protection Act B.E. 2562 and related laws. The data we collect will be used only for service provision, improving user experience, and necessary communication.
1. Data We Collect
- Personal information: name, phone number, email address
- Account information: login credentials, profile data
- Booking information: booking history, payment records
- Device information: device type, operating system, browser type
- Location data: when you use map or nearby features (with your consent)
2. How We Use Your Data
- To provide and improve our booking services
- To process payments and send booking confirmations
- To communicate service updates and promotions
- To personalize your experience and recommendations
- To comply with legal obligations
3. Data Sharing
- We share necessary information with service providers to fulfill your bookings
- We may share data with payment processors to complete transactions
- We do not sell your personal data to third parties
- We may disclose data when required by law or to protect our legal rights
4. Data Security
- We implement appropriate technical and organizational security measures
- Data is transmitted using encryption protocols
- Access to personal data is restricted to authorized personnel only
5. Your Rights
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of your data
- Right to withdraw consent at any time
- Right to file a complaint with the data protection authority
6. Contact Us
If you have questions about this privacy policy or wish to exercise your rights, please contact us at: [email protected] or through the channels provided in the application.
7. Data Retention
- Account and personal data: retained for the duration of account activity plus 3 years after account closure
- Booking and financial records: retained for 7 years in accordance with financial and tax regulations
- You may request deletion of your personal data by contacting [email protected] (subject to applicable legal retention requirements)