Privacy Policy

Privacy Policy

Love Nature Krabi Travel & Tours ("we," "our," or "us") is committed to protecting your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you interact with our website, services, and tours.

Who We Are

Love Nature Krabi Travel & Tours is a locally owned travel agency based in Krabi, Thailand. We provide private tours, transfers, and immersive travel experiences throughout Krabi and nearby destinations. This Privacy Policy applies to all users of our website, whether you are booking a tour, browsing information, or contacting us.

What Personal Data We Collect

We collect various types of personal data to operate effectively and provide you with the best experiences. This may include:

• Information you provide directly:
  
• Full name
  
• Email address
  
• Phone number
  
• Nationality
  
• Passport or ID details (required for certain travel or booking processes)
  
• Special requests or preferences (e.g. dietary requirements, accessibility needs)
  
• Payment and billing information
  
  
• Information we collect automatically:
  
• IP address and device identifiers
  
• Browser type, version, and language
  
• Date and time of website access
  
• Referring website URLs
  
• Pages viewed, time spent on the website, clicks, and navigation paths
  
  
• Information from third parties:
  
• Booking platforms (if you booked through a partner site)
  
• Social media platforms (if you interact with us via Facebook, Instagram, etc.)
  
  

We do not intentionally collect sensitive personal data unless you provide it to us voluntarily and give explicit consent.

Why We Collect Your Data

We collect and use your data to:

• Process tour and transfer bookings efficiently
  
• Provide confirmations, receipts, itineraries, and service updates
  
• Manage payments, cancellations, and refunds
  
• Tailor services based on your preferences or requests
  
• Respond to inquiries or customer support needs
  
• Send updates, promotions, and relevant travel content (with your consent)
  
• Comply with legal, immigration, or safety requirements
  

Improve our website and service experience through analytics and user feedback

Legal Basis for Processing

We only process personal data when we have a valid legal basis to do so under the PDPA:

• Consent – For sending promotional material or collecting optional data (e.g. health info)
  
• Contract – To fulfil our obligations under a booking or service agreement
  
• Legal obligation – When required to comply with Thai law or government authorities
  
• Legitimate interest – To improve our services, monitor website usage, and ensure a secure experience
  
  

You may withdraw your consent at any time where it was previously provided.

How We Share Your Data

We may share your information with the following parties, only as necessary to fulfil the purposes outlined above:

• Tour guides, drivers, boat operators, or local partners involved in your itinerary
  
• Third-party service providers such as:
  
• Payment processors (e.g. Stripe, PayPal)
  
• Website hosting and analytics providers
  
• Marketing and email communication platforms
  
  

We require all third parties to handle your data securely and only use it for the agreed purposes. We do not sell, rent, or trade your personal data to any external parties.

International Data Transfers

Some of our service providers may be located outside of Thailand. If we transfer your personal data internationally, we ensure that adequate protections are in place, as required under the PDPA, including:

• Contracts that require data recipients to comply with Thai data protection standards
  
• Transfers only to countries with adequate levels of data protection
  
• Your explicit consent where necessary
  
  

Data Security Measures

We take data protection seriously and implement technical, administrative, and physical safeguards to secure your information. These include:

• SSL encryption for all website data transfers
  
• Secure cloud storage and access control systems
  
• Regular updates and monitoring to prevent unauthorized access
  
• Staff training on data handling practices
  
  

However, no method of transmission over the Internet is completely secure. We cannot guarantee absolute protection but strive to use industry-standard practices.

Data Retention Policy

We will retain your personal data only for as long as necessary to:

• Complete your booking and provide services
  
• Comply with legal, accounting, and tax obligations
  
• Maintain customer records for internal business operations
  
  

Typically, data is retained for up to 7 years unless required for ongoing legal purposes. After that, we will securely delete or anonymize the data.

Your Rights Under PDPA

As a data subject under the PDPA, you have the following rights:

• Right to access – Request a copy of the personal data we hold about you
  
• Right to rectification – Request corrections to inaccurate or incomplete data
  
• Right to erasure – Request deletion of data no longer needed or processed unlawfully
  
• Right to object – Object to processing based on legitimate interests or for direct marketing
  
• Right to restrict processing – Request limits on how we use your data
  
• Right to data portability – Request transfer of your data to another controller
  
• Right to withdraw consent – Revoke consent at any time (applies only to data processed on that basis)
  
  

To exercise your rights, please contact us using the information in Section 12.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and understand user behavior. Cookies may:

• Remember your preferences (e.g. language or currency)
  
• Analyze traffic patterns and usage trends
  
• Provide targeted advertising (only if you consent)
  
  

You can manage or disable cookies via your browser settings. We respect Do Not Track (DNT) browser settings where supported.

Children’s Privacy

Our website and services are not intended for individuals under 20 years of age. We do not knowingly collect data from minors without verified parental or guardian consent. If we learn that we have collected data from a minor without consent, we will promptly delete it.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your rights, please contact us at:

Love Nature Krabi Travel & Tours
211 Moo 2, Muang Krabi, 81180 Thailand
Email: [email protected]
Phone: +66 96 407 5194

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in legal requirements or our data practices. When we make changes, we will revise the "Effective Date" at the top. If the changes are significant, we will notify you through the website or other contact methods.

We encourage you to review this Privacy Policy periodically to stay informed of how we protect your personal data.

Thank you for trusting Love Nature Krabi Travel & Tours with your travel experiences and personal data. We are committed to keeping your information safe and providing transparent, respectful data practices.