Khaolak Elephant Sanctuary ("we", "our", "us") respects your privacy. This Policy explains how we collect, use, disclose, and protect personal data when you use our website and services.
1) Who We Are
Khaolak Elephant Sanctuary, Khao Lak, Phang‑nga, Thailand. Website: www.khaolak-elephantsanctuary.com.
2) Scope
This Policy applies to personal data we collect via our website, forms, email/phone/WhatsApp communications, and booking processes. It does not cover third‑party websites or services we do not control.
3) Data We Collect
Data you provide
- Contact details (name, email, phone/WhatsApp)
- Booking information (tour date/time, party size, preferences)
- Messages and correspondence
- Marketing preferences (opt‑in/opt‑out)
Data we collect automatically
- Device and usage data (IP address, browser, pages viewed)
- Cookies and similar technologies (see Cookies section)
- Approximate location derived from IP (no precise geolocation)
Sensitive data
We do not intentionally collect sensitive personal data. If necessary (e.g., accessibility or dietary needs), we process it only with your consent and solely to provide requested services.
4) How We Use Data
- Manage enquiries, bookings, confirmations, reminders, and changes
- Provide customer support and respond to requests
- Improve our website, services, and safety practices
- Send important service communications
- Send marketing communications if you have opted in (you can unsubscribe at any time)
- Comply with laws, regulations, and tax/accounting obligations
5) Legal Bases (GDPR/PDPA)
- Contract: to provide and manage your booking
- Consent: for marketing, cookies, or special requests
- Legitimate Interests: to improve services and ensure security
- Legal Obligation: to meet regulatory, tax, or safety requirements
6) Sharing of Information
We do not sell your personal data. We may share limited information with:
- Service providers needed to deliver your booking (e.g., payment processors, transfer partners)
- IT/hosting/analytics providers under contractual safeguards
- Authorities, when required by law or to protect rights and safety
7) Cookies & Similar Technologies
We use cookies to operate the site, analyze performance, and enhance content. You can manage cookies via your browser settings. If a cookie banner is enabled, use Cookie Preferences to adjust choices.
- Strictly necessary: required for core functionality
- Performance/analytics: to understand usage and improve the site
- Functional: to remember preferences
- Advertising: only if enabled; not used without consent
8) Data Retention
- Enquiries (forms/email/WhatsApp): up to 12 months
- Booking/transaction records: up to 7 years (accounting/tax law)
- Marketing subscriptions: until you unsubscribe or your consent is withdrawn
9) Your Rights
Subject to applicable law (e.g., PDPA/GDPR), you may request to access, correct, delete, restrict, or object to processing, and to withdraw consent. You may also request a copy (data portability) where applicable.
To exercise your rights, contact us at [email protected] with the subject line: “Privacy Request – Khaolak Elephant Sanctuary”. We may ask to verify your identity.
10) Children
We process children’s data only with the involvement of a parent/guardian (e.g., for family bookings). We do not market directly to children.
11) Data Security
We implement technical and organizational measures to protect personal data. However, no method of transmission or storage is 100% secure. Please take care when sharing information online.
12) International Transfers
Your data may be stored or processed in countries outside your own. Where required, we use appropriate safeguards to protect your information.
13) Third‑Party Links
Our site may link to third‑party websites or services. Their privacy practices are governed by their own policies, which we encourage you to review.
14) Changes to This Policy
We may update this Policy periodically. Material changes will be posted here with an updated effective date.
15) Contact
Email: [email protected]
