Privacy Policy for Phuket Dream Company
Last Updated: 14 May 2026
Welcome to Phuket Dream Company. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, share, and safeguard your information when you use our website, services, and AI-powered support tools.
This policy is designed to comply with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), as well as international standards including the EU General Data Protection Regulation (GDPR) where applicable to our European customers.
1. Who We Are (Data Controller)
Phuket Dream Company is the data controller responsible for your personal information.
- Business name: Phuket Dream Company
- Website: phuketdreamcompany.asia / www.phuketdreamcompany.com
- Contact email: [email protected]
- Location: Phuket, Thailand
2. Information We Collect
a. Personal Information: When you make a booking, we collect information such as your name, contact details (phone, email, messaging app IDs like LINE/WhatsApp/WeChat), nationality, passport or ID number (where required by tour operators for insurance), payment information, and any other details necessary to provide your service.
b. Health & Safety Information: For certain tours, we may collect relevant health information you voluntarily disclose (e.g., pregnancy status, allergies, mobility needs, age) to ensure your safety and compliance with operator policies.
c. User Account Information: If you create an account, we may collect your username, password (encrypted), preferences, and booking history.
d. Communication Data: We store correspondence when you contact us via email, website chat, LINE, WhatsApp, Messenger, WeChat, or our AI Travel Specialist (Hannah). This includes any feedback, reviews, or recordings.
e. AI Voice Agent Interactions: When you interact with our AI voice agent (“Hannah”) via our website widget, your voice may be transcribed to text and processed by AI services to provide answers. Conversations may be retained to improve service quality.
f. Device and Usage Information: We collect information about your device, IP address, browser type, operating system, pages visited, time spent on the site, and referral sources.
g. Cookies and Tracking Technologies: Our website uses cookies and similar technologies. See Section 9 for details.
3. Legal Basis for Processing (PDPA / GDPR)
We process your personal information under the following legal bases:
- Contractual necessity: To fulfill bookings and provide services you have requested.
- Consent: For marketing communications, optional cookies, and non-essential processing.
- Legitimate interests: To improve our services, prevent fraud, and maintain security.
- Legal obligation: To comply with Thai law, tax requirements, and lawful requests from authorities.
4. How We Use Your Information
a. Booking and Reservation: To process your bookings, coordinate with operators (hotels, boats, drivers), and ensure a seamless experience.
b. Account Management: To manage and personalize your account and preferences.
c. Communication: To send booking confirmations, important updates, pre-trip information, and respond to your inquiries.
d. Safety and Compliance: To share necessary information with tour operators for safety, insurance, and regulatory compliance (e.g., national park registration, marine authority requirements).
e. Customer Support: To provide AI-assisted and human customer support throughout your journey.
f. Marketing and Promotions: With your consent, we may send you marketing materials about our services. You can opt out at any time.
g. Service Improvement: To analyze usage patterns and improve our website, AI agent, and customer service.
h. Legal and Security: To prevent fraud, comply with laws, and enforce our terms.
5. Sharing Your Information
We may share your information with:
a. Service Providers and Operators: Hotels, tour operators, boat charter companies, transportation providers, and other partners necessary to deliver your booked services.
b. Payment Processors: Secure third-party payment gateways (credit card processors, bank transfer systems, PromptPay) to process your payments. We do not store full credit card numbers on our servers.
c. Technology Providers: Cloud hosting, customer support platforms, AI services (e.g., voice agent providers, language models), email systems, and analytics tools.
d. Legal Requirements: When required by Thai law, court order, government request, or to protect our legal rights.
e. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
We do not sell your personal information to third parties.
6. International Data Transfers
As a Thailand-based business serving international customers, your information may be transferred to and processed in countries outside Thailand or your country of residence, including where our AI service providers, cloud hosts, and operator partners are located. We take reasonable steps to ensure these transfers comply with applicable data protection laws.
7. Data Retention
We retain your personal information only as long as necessary to:
- Fulfill the purposes outlined in this policy
- Comply with legal, accounting, and tax obligations (typically 5–10 years for financial records under Thai law)
- Resolve disputes and enforce agreements
Booking records are generally retained for 5 years. Marketing data is retained until you withdraw consent. AI conversation logs are typically retained for 6 to 24 months for service quality purposes.
8. Your Rights
Under Thailand’s PDPA and other applicable laws, you have the following rights regarding your personal information:
- Right of access: Request a copy of the personal information we hold about you.
- Right to rectification: Request correction of inaccurate information.
- Right to erasure: Request deletion of your information (subject to legal retention requirements).
- Right to restrict processing: Request that we limit how we use your information.
- Right to data portability: Request your information in a portable format.
- Right to object: Object to processing for marketing or based on legitimate interests.
- Right to withdraw consent: Withdraw consent for processing at any time.
- Right to lodge a complaint: File a complaint with Thailand’s Personal Data Protection Committee (PDPC) or your local data protection authority.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
9. Cookies and Tracking
Our website uses cookies for:
- Essential cookies: Required for site functionality (e.g., login sessions, shopping cart).
- Analytics cookies: To understand how visitors use our site (e.g., Google Analytics).
- Marketing cookies: With your consent, to deliver relevant advertising.
You can manage your cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect site functionality.
10. Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- SSL/TLS encryption for data transmission
- Secure payment processing through PCI-compliant providers
- Access controls and authentication for our staff
- Regular security reviews and software updates
- Encrypted password storage
However, no online transmission is 100% secure. We cannot guarantee absolute security but commit to notifying affected users and relevant authorities promptly in the event of a data breach, as required by law.
11. AI-Powered Services
Our AI Travel Specialist (“Hannah”) uses third-party AI language models to provide automated assistance. Please be aware:
- AI responses may not always be accurate; please verify important details with our human team.
- Conversations may be logged and used to improve service quality.
- You can request a human agent at any time.
- Do not share sensitive personal information (e.g., full payment card numbers, passwords) through the AI agent.
12. Children’s Privacy
Our services are intended for adults. We do not knowingly collect personal information directly from individuals under 18. Children may participate in tours when accompanied by a parent or guardian who has made the booking. If we learn we have collected information from a child without parental consent, we will delete it.
13. Third-Party Links
Our website may contain links to third-party sites (e.g., partner hotels, booking platforms). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing your information.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Material changes will be communicated by posting the updated policy on our website and updating the “Last Updated” date. We encourage you to review this policy regularly.
15. Contact Us
If you have any questions, concerns, or wish to exercise your rights regarding your personal information, please contact us:
- Email: [email protected]
- LINE: @487oaerv
- Website contact form: Contact Us
For complaints regarding our data practices, you may also contact:
Thailand Personal Data Protection Committee (PDPC): Office of the Personal Data Protection Committee Website: https://www.pdpc.or.th
Thank you for choosing Phuket Dream Company. We look forward to providing you with an unforgettable travel experience.