Privacy Policy

This policy explains what personal data The Insider Guide collects and how we use it. Questions or requests: theinsiderguideth@gmail.com.

What we collect

• Free guide: your name and email address, and whether you agreed to receive tips.
• Bookings: your name, email, phone/WhatsApp or LINE ID, travel dates, flight and pickup details, and any notes you give us.
• Payments are handled by Stripe. We don’t receive or store your full card number.

How we use it

• To send the guide you asked for and to provide the service you booked.
• To contact you about your booking.
• To send occasional tips and offers — only if you opted in. You can unsubscribe at any time.

Why we’re allowed to use it

• To provide a service you asked for (the guide, a booking or a plan) — necessary to fulfil our agreement with you.
• Tips and offers — only with your consent, which you can withdraw at any time.
• Keeping payment and booking records — to meet our accounting and tax obligations.

Who we share it with

Only the service providers needed to run this website: Stripe (payments), Supabase (secure data storage), Resend (email) and Cloudflare (hosting and spam protection). We never sell your data.

Some of these providers store data outside Thailand (for example in Singapore, the EU or the United States). They are bound by contracts that require them to protect your data.

Cookies

We don’t use advertising or tracking cookies. Cloudflare Turnstile checks that forms are sent by a person, and Stripe sets the cookies it needs on its own payment page.

How long we keep it

• Free guide sign-ups: until you ask us to delete them or unsubscribe.
• Booking and payment records: as long as Thai accounting law requires (currently up to 5 years), then deleted.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, object to its use, or withdraw consent, by emailing us. We reply within 30 days. If you’re not happy with our answer, you can complain to Thailand’s Personal Data Protection Committee (PDPC) or the data protection authority where you live.