Phuket Dream Company is the data controller responsible for your personal information.

• Business name: Phuket Dream Company
• Websites: phuketdreamcompany.asia / www.phuketdreamcompany.com
• Contact email: [email protected]
• Location: Phuket, Thailand

a. Personal information

When you make a booking, we collect information such as your name, contact details (phone, email, messaging app IDs like LINE/WhatsApp/WeChat), nationality, payment information, and any other details necessary to provide your service.

b. Traveller details required by operators & insurers

For certain bookings — particularly private boat charters, speedboats and marine tours — operators require each traveller's full name, passport (or ID) number, date of birth, and nationality. These details are required so that every guest is named on the operator's marine insurance manifest and, where applicable, registered with National Park authorities or Thailand's Marine Department before departure. We only request these details when an operator or authority requires them, and they may be provided via email, WhatsApp, LINE or WeChat. See our Booking Conditions for full details on how this information is handled.

c. Health & safety information

For certain tours, we may collect relevant health information you voluntarily disclose (e.g., pregnancy status, allergies, mobility needs, age) to ensure your safety and compliance with operator policies.

d. User account information

If you create an account, we may collect your username, password (encrypted), preferences, and booking history.

e. Communication data

We store correspondence when you contact us via email, website chat, LINE, WhatsApp, Messenger, WeChat, or our AI Travel Specialist (Hannah). This includes any feedback, reviews, or recordings.

f. AI voice agent interactions

When you interact with our AI voice agent ("Hannah") via our website widget, your voice may be transcribed to text and processed by AI services to provide answers. Conversations may be retained to improve service quality.

g. Device and usage information

We collect information about your device, IP address, browser type, operating system, pages visited, time spent on the site, and referral sources.

h. Cookies and tracking technologies

Our website uses cookies and similar technologies. See the Cookies and Tracking section below for details.

We process your personal information under the following legal bases:

• Contractual necessity: to fulfil bookings and provide services you have requested — including providing required traveller details to operators, insurers and authorities.
• Consent: for marketing communications, optional cookies, and non-essential processing.
• Legitimate interests: to improve our services, prevent fraud, and maintain security.
• Legal obligation: to comply with Thai law, tax requirements, and lawful requests from authorities.

• Booking and reservation: to process your bookings, coordinate with operators (hotels, boats, drivers), and ensure a seamless experience.
• Account management: to manage and personalise your account and preferences.
• Communication: to send booking confirmations, important updates, pre-trip information, and respond to your inquiries.
• Safety, insurance and compliance: to share necessary traveller information (full name, passport number, date of birth, nationality) with tour operators for insurance coverage and regulatory compliance — such as national park registration and marine authority requirements. This ensures every guest in your group is properly covered.
• Customer support: to provide AI-assisted and human customer support throughout your journey.
• Marketing and promotions: with your consent, we may send you marketing materials about our services. You can opt out at any time.
• Service improvement: to analyse usage patterns and improve our website, AI agent, and customer service.
• Legal and security: to prevent fraud, comply with laws, and enforce our terms.

We may share your information with:

• Service providers and operators: hotels, tour operators, boat charter companies, transportation providers, and other partners necessary to deliver your booked services — including their insurers and relevant authorities where traveller details are required for coverage and registration.
• Payment processors: secure third-party payment gateways (credit card processors, bank transfer systems, PromptPay). We do not store full credit card numbers on our servers.
• Technology providers: cloud hosting, customer support platforms, AI services (e.g., voice agent providers, language models), email systems, and analytics tools.
• Legal requirements: when required by Thai law, court order, government request, or to protect our legal rights.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

As a Thailand-based business serving international customers, your information may be transferred to and processed in countries outside Thailand or your country of residence, including where our AI service providers, cloud hosts, and operator partners are located. We take reasonable steps to ensure these transfers comply with applicable data protection laws.

We retain your personal information only as long as necessary to:

• Fulfil the purposes outlined in this policy
• Comply with legal, accounting, and tax obligations (typically 5–10 years for financial records under Thai law)
• Resolve disputes and enforce agreements

Booking records are generally retained for 5 years. Marketing data is retained until you withdraw consent. AI conversation logs are typically retained for 6 to 24 months for service quality purposes.

Under Thailand's PDPA and other applicable laws, you have the following rights regarding your personal information:

• Right of access: request a copy of the personal information we hold about you.
• Right to rectification: request correction of inaccurate information.
• Right to erasure: request deletion of your information (subject to legal retention requirements).
• Right to restrict processing: request that we limit how we use your information.
• Right to data portability: request your information in a portable format.
• Right to object: object to processing for marketing or based on legitimate interests.
• Right to withdraw consent: withdraw consent for processing at any time.
• Right to lodge a complaint: file a complaint with Thailand's Personal Data Protection Committee (PDPC) or your local data protection authority.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Our website uses cookies for:

• Essential cookies: required for site functionality (e.g., login sessions, shopping cart).
• Analytics cookies: to understand how visitors use our site (e.g., Google Analytics).
• Marketing cookies: with your consent, to deliver relevant advertising.

You can manage your cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect site functionality.

We implement appropriate technical and organisational measures to protect your information, including:

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-compliant providers
• Access controls and authentication for our staff
• Regular security reviews and software updates
• Encrypted password storage

However, no online transmission is 100% secure. We cannot guarantee absolute security but commit to notifying affected users and relevant authorities promptly in the event of a data breach, as required by law.

Our AI Travel Specialist ("Hannah") uses third-party AI language models to provide automated assistance. Please be aware:

• AI responses may not always be accurate; please verify important details with our human team.
• Conversations may be logged and used to improve service quality.
• You can request a human agent at any time.
• Do not share sensitive personal information (e.g., full payment card numbers, passwords) through the AI agent.

Our services are intended for adults. We do not knowingly collect personal information directly from individuals under 18. Children may participate in tours when accompanied by a parent or guardian who has made the booking; in these cases, a parent or guardian provides any traveller details required for the child's insurance coverage. If we learn we have collected information from a child without parental consent, we will delete it.

Our website may contain links to third-party sites (e.g., partner hotels, booking platforms). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing your information.

We may update this Privacy Policy periodically. Material changes will be communicated by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy regularly.

If you have any questions, concerns, or wish to exercise your rights regarding your personal information, please contact us:

• Email: [email protected]
• LINE: @487oaerv
• Website: Contact Us

For complaints regarding our data practices, you may also contact the Thailand Personal Data Protection Committee (PDPC): www.pdpc.or.th