Privacy Policy

1. What this policy covers

This policy explains what personal data we collect when you use this website, book a visit or contact us, and what rights you have. It is written to meet the Thai Personal Data Protection Act (PDPA) and, for visitors from the EU/EEA, the GDPR.

2. Data we collect

Bookings: the booker's name, email address and phone number, the visit date, location and packages, and each guest's age and height (needed to check the safety requirements). Payment: handled entirely by Stripe; we receive only a payment reference and never your card details. Contact form: your name, email address and message. Technical: our servers keep short-lived logs (IP address, time, requested page) to run and secure the site. We use only strictly necessary cookies (for example the staff login); there are no advertising or tracking cookies.

3. How we use your data

To process and confirm your booking, deliver your QR ticket and any refund notifications by email, answer your enquiries, prevent fraud and meet legal obligations such as accounting. We do not sell personal data and we do not send marketing emails.

4. Processors and transfers

We share data only with service providers who need it to deliver the service: Stripe (payment processing), Resend (transactional email delivery) and our hosting provider. Some of these providers process data outside Thailand and the EU/EEA; where they do, transfers rely on recognised safeguards such as standard contractual clauses.

5. Retention

Booking and payment records are kept for as long as Thai tax and accounting law requires, then deleted. Contact-form messages are deleted once your enquiry is resolved. Server logs are kept only briefly.

6. Your rights

Under the PDPA and, where applicable, the GDPR you can ask us for access to, correction or deletion of your data, object to or restrict its processing, withdraw consent, and receive a copy in a portable format. You can also complain to your supervisory authority (in Thailand, the PDPC). To exercise any right, contact us using the details below; we will respond within the statutory period.

7. Contact

Data controller: [TO BE COMPLETED: legal company name and address, see the Imprint page]. Email: info@tigerkingdom.com. You can also reach us on LINE via the link in the footer.