Privacy Policy
Effective Date: July 22, 2026
This Policy applies to all Thai.Rentals visitors and customers regardless of location and explains how we collect, use, and protect personal data when you use the Site and our booking services. We process personal data in accordance with applicable law; depending on your country of residence, you may have additional rights.
Data Controller: Valentina Borovaia (Thai.Rentals). Contact details are provided in How to Contact Us.
Table of Contents
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing
- Data Sharing and Disclosure
- International Data Transfers
- Your Data Protection Rights
- Data Retention
- Cookies and Similar Technologies
- Children’s Privacy
- Data Collection Scope
- Changes to This Privacy Policy
- How to Contact Us
1. Information We Collect
Personal Identification Information
Your full name, email address, phone number, nationality, and, where required for legal compliance, a copy of your passport or identification card. This is necessary to fulfill legal obligations in Thailand, such as TM30 reporting to Thai Immigration authorities.
Booking Information
Details of your reservations, check-in/out dates, and special requests.
Communications
The content of your emails and messages via messengers (WhatsApp, Telegram).
Technical Information
Page viewed, referrer and UTM parameters, country, region and city, browser, OS and device type, and contact-button clicks. We use Fathom Analytics for website analytics. When maps or videos are loaded, the relevant external provider also receives technical request data. Message contents from messaging services are not sent to analytics providers. See our Cookie Policy for details.
2. How We Use Your Information
- To Provide Our Services: Processing bookings and managing your stay
- To Communicate with You: Responding to inquiries and providing support
- For Payment Processing: Facilitating payments for your reservations
- To Comply with Legal Obligations: Meeting our legal requirements in Thailand (TM30 Immigration Reporting, rental documentation, tax compliance)
- For Marketing Purposes: With your explicit consent, sending promotional offers
3. Legal Basis for Processing
- Performance of a Contract: To fulfill our booking agreement with you
- Legal Obligation: To comply with Thai laws (immigration and tax regulations)
- Consent: For marketing communications
- Legitimate Interests: To improve the Site and our services, understand site traffic, maintain security, and prevent fraud
4. Data Sharing and Disclosure
Third-Party Service Providers
We disclose data to external providers only to the extent necessary for the relevant service. These providers include Fathom Analytics, map and video providers, messaging services, booking management systems, Online Travel Agencies (Booking.com, Airbnb), payment processors, and cloud services. Depending on the service, a provider may act as a processor on our behalf or as an independent controller under its own privacy policy.
Legal Authorities
We disclose information to Thai authorities, such as the Immigration Bureau for TM30 reporting, when required by law.
We do not sell personal data or share it for cross-context behavioural advertising.
5. International Data Transfers
Messages sent through Telegram, WhatsApp, or another external communication channel are processed by that provider and may be transferred to other countries.
We use third-party services, including booking management systems and online booking platforms. They may process data in countries other than your country of residence.
Technical analytics data is processed using infrastructure operated by Fathom Analytics. Fathom routes European Union visitor traffic to infrastructure in the EU, while traffic from other regions may be processed in the United States.
In the course of preparing and fulfilling the rental agreement, data may be transferred to Thailand for booking verification and compliance with Thai legal requirements.
Where applicable law requires specific safeguards for an international transfer, we use a mechanism provided by that law or an applicable legal exception. In particular, a transfer may be necessary to enter into or perform a contract at your request. You may contact us for information about a specific transfer.
6. Your Data Protection Rights
Regardless of your location, you may ask to access, correct, or delete data held directly by us. Depending on applicable law, you may also have the right to restrict or object to processing, receive a portable copy of your data, withdraw previously given consent, and lodge a complaint with a competent data protection authority.
To exercise these rights, please contact us. We may request information needed to verify your identity and protect data against unauthorised disclosure. We do not make decisions producing legal or similarly significant effects based solely on automated processing.
7. Data Retention
We retain personal data only for as long as necessary for the purposes stated in this Policy or as required by law. When the data is no longer needed, we securely delete, destroy, or anonymize it.
Booking and Financial Records
Period: Up to 7 years after the end of the relevant financial year
To comply with Thai tax, accounting, and audit obligations
Passport and Identification Data
Period: Up to 90 days after check-out
To comply with applicable immigration/accommodation reporting obligations and to handle post-stay verification, fraud prevention, or legal claims, where necessary. If no longer needed, the data is deleted earlier.
General Inquiries and Communications
Period: 1 year
To respond to follow-up requests, maintain service records, and analyze non-booking inquiries
Marketing Consents
Period: 2 years after your last interaction, or until you withdraw your consent, whichever comes first
To maintain a record of your marketing preferences and comply with consent management obligations
After these periods expire, we take active steps to ensure your personal data is securely and permanently deleted from all systems under our control, including instructing our data processors accordingly.
8. Cookies and Similar Technologies
The Site uses a functional language cookie and cookieless Fathom analytics. See our Cookie Policy for details.
9. Children’s Privacy
Services not directed to individuals under 18. Information about children collected only as part of family bookings with parental consent. Same data protection standards apply as for adult guests.
10. Data Collection Scope
Informational Sections
When browsing property information, the Site collects only technical data: the interface-language cookie, aggregated visit analytics, and contact-button click events. There are no contact forms on the Site; following a messenger link opens an external service, and message contents are not sent to analytics providers.
Booking Process
Data required for a booking — full name, passport information (to comply with Thai legal requirements), contact information, and payment data — is provided directly to the manager during communication. The Site does not accept this data or use booking-system cookies.
This Policy applies to all Thai.Rentals channels where we determine the purposes and means of processing personal data.
11. Changes to This Privacy Policy
We may update this policy periodically. The new version will be posted on this page with an updated “Effective Date”.