Privacy Policy
Effective Date: November 22, 2025
This Policy describes how Thai.Rentals collects, uses, and discloses your personal information when using our websites and booking services.
Drafted to comply with Thailand’s Personal Data Protection Act (PDPA) and GDPR standards.
Table of Contents
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- Data Sharing and Disclosure
- International Data Transfers
- Your Data Protection Rights
- Data Retention
- Cookies and Similar Technologies
- Children’s Privacy
- Data Collection Scope
- Changes to This Privacy Policy
- How to Contact Us
1. Information We Collect
Personal Identification Information
Your full name, email address, phone number, nationality, and, where required for legal compliance, a copy of your passport or identification card. This is necessary to fulfill legal obligations in Thailand, such as TM30 reporting to Thai Immigration authorities.
Booking Information
Details of your reservations, check-in/out dates, and special requests.
Communications
The content of your emails and messages via messengers (WhatsApp, Telegram).
Technical Information
IP address, browser type, cookies. We use Microsoft Clarity for site interaction analytics. See our Cookie Policy for details.
2. How We Use Your Information
- To Provide Our Services: Processing bookings and managing your stay
- To Communicate with You: Responding to inquiries and providing support
- For Payment Processing: Facilitating payments for your reservations
- To Comply with Legal Obligations: Meeting our legal requirements in Thailand (TM30 Immigration Reporting, rental documentation, tax compliance)
- For Marketing Purposes: With your explicit consent, sending promotional offers
3. Legal Basis for Processing
- Performance of a Contract: To fulfill our booking agreement with you
- Legal Obligation: To comply with Thai laws (immigration and tax regulations)
- Consent: For marketing communications
- Legitimate Interests: To improve our services and prevent fraud
4. Data Sharing and Disclosure
Third-Party Service Providers
We use external services that act as our Data Processors: booking management systems, Online Travel Agencies (Booking.com, Airbnb), payment processors, cloud data storage services.
Legal Authorities
We disclose information to Thai authorities, such as the Immigration Bureau for TM30 reporting, when required by law.
5. International Data Transfers
Your personal data may be processed outside your country through:
- Online Travel Agencies (Airbnb, Booking.com, and other OTAs)
- Booking management systems
- Cloud data storage services
When your data is transferred outside of the European Economic Area (EEA), we use appropriate safeguards, including the EU’s Standard Contractual Clauses (SCCs), to ensure your data receives a level of protection equivalent to EU and PDPA requirements.
6. Your Data Protection Rights
You have the right to access, rectify, erase, restrict, or object to the processing of your data, and the right to data portability. To exercise these rights, please contact us. As the Data Controller, we are responsible for fulfilling your request, which includes coordinating with all engaged data processors. You also have the right to lodge a complaint with a data protection authority.
7. Data Retention
Booking and Financial Records
Period: 7 years after the end of the financial year of your stay
To comply with Thai tax and revenue laws
Passport and Identification Data
Period: 90 days after check-out
Thai immigration and accommodation regulations
General Inquiries and Communications
Period: 1 year
For analytical purposes (inquiries without booking)
Marketing Consents
Period: 2 years after your last interaction
Or until you withdraw your consent
After these periods expire, we take active steps to ensure your personal data is securely and permanently deleted from all systems under our control, including instructing our data processors accordingly.
8. Cookies and Similar Technologies
Our websites use cookies. Please see our detailed Cookie Policy for more information.
9. Children’s Privacy
Services not directed to individuals under 18. Information about children collected only as part of family bookings with parental consent. Same data protection standards apply as for adult guests.
10. Data Collection Scope
Informational Sections
When browsing property information, we collect minimal data: contact information through forms and technical data (cookies for interface language, visit analytics).
Booking Process
When making a booking, we collect full data: full name, passport information (to comply with Thai legal requirements), contact information, and payment data. Functional cookies are used for booking system operation.
All Thai.Rentals platforms are operated uniformly and are covered by this Privacy Policy.
11. Changes to This Privacy Policy
We may update this policy periodically. The new version will be posted on this page with an updated “Effective Date”.