1. Who We Are
The Jai Thai platform is operated by Jai Thai Travel, a trade name of AppaSP (also trading as ThaiTourConnect), a sole proprietorship (eenmanszaak) registered in the Netherlands, KVK number 89898893, Oldenzaalsestraat 797, 7524 AD Enschede, the Netherlands (“Jai Thai”, “we”, “us”).
For the personal data described in this policy, Jai Thai is the data controller under the EU General Data Protection Regulation (GDPR). Contact: support@jaithaitravel.com.
2. What Data We Collect
When you make a booking:
- Name and names of participants
- Email address and phone number (including messaging apps you choose, such as WhatsApp or LINE)
- Pickup location or hotel, travel date, party size, and any details you provide for the booking (for example dietary requirements or health information you choose to share so the operator can accommodate you)
- Booking history and communications with us
Your Jai Thai account:
- When you make your first booking, an account is created automatically for your email address
- The account holds your profile details, your booking history, your preferences, and your loyalty points balance and activity
When you pay:
- Payment is processed by our payment provider (currently Stripe). We receive confirmation of payment, the amount, and a payment reference. We do not store your full card details.
When you visit our websites:
- Technical data such as IP address, device and browser type, and pages visited
- Cookies and similar technologies, as described in our Cookie Policy at jaithaitravel.com/legal/cookie-policy
When you contact us:
- The content of your messages and your contact details
If you are an operator (business partner):
- Business and contact details, registration and licence numbers, tax identification number, bank details, and account activity. We process these to run the platform, pay you out, and meet our legal obligations (including EU platform reporting rules, DAC7).
3. Why We Use Your Data (and the Legal Basis)
4. Who We Share Your Data With
The operator of your booking. To deliver your tour or transfer, we share your booking details (name, contact details, pickup information, party size) with the operator. Operators are independent local businesses in Thailand and handle this data under their own responsibility. They may contact you about your booking and, subject to applicable law and your right to opt out, about their own services.
Service providers. Payment processing (Stripe), payout services (Wise), website hosting and infrastructure (Vercel), email delivery (SendGrid), and analytics (Google Analytics). These providers process data for us under data processing agreements where required.
Authorities. Where the law requires it, for example tax authorities under EU platform reporting rules.
We do not sell your personal data.
5. International Transfers
The operators who deliver your services are located in Thailand, and your booking details are transferred there. This transfer is necessary for the performance of your booking contract (GDPR Art. 49(1)(b)): without it, the operator cannot pick you up or run your tour. Our agreements with operators require them to handle your data securely and lawfully.
Some service providers may process data outside the EU (for example in the United States). Where they do, we rely on safeguards such as adequacy decisions or EU Standard Contractual Clauses.
6. How Long We Keep Your Data
- Your Jai Thai account: for as long as the account exists; if you ask us to delete your account, we delete it and keep only what the law requires us to keep (see the next line)
- Booking and payment records: 7 years, as required by Dutch tax law (fiscale bewaarplicht)
- Support communications: up to 2 years after the issue is closed
- Marketing data: until you opt out or withdraw consent
- Technical and analytics data: per the periods in our Cookie Policy
After these periods, data is deleted or anonymised.
7. Your Rights
Under the GDPR you can ask us at any time to:
- access the data we hold about you;
- correct inaccurate data;
- delete your data (where we have no legal duty to keep it);
- restrict or object to processing, including direct marketing (objection to marketing is always honoured);
- receive your data in a portable format;
- withdraw consent, where processing is based on consent.
Email support@jaithaitravel.com and we respond within one month. You also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the supervisory authority of your own EU country.
8. Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls, and reputable EU-compliant service providers. Payment data is handled by Stripe under PCI-DSS standards.
9. Children
Our services are directed at adults. Bookings can only be made by persons aged 18 or over. Participant details of children in a booking party are provided by the adult who books and are used only to deliver the service.
10. Changes to This Policy
We may update this policy from time to time. The current version, with its effective date, is always available at the address at the top of this page. For significant changes we will inform you where reasonably possible.