Privacy policy

This policy explains what personal information Krabi Escape collects when you book, why, and your rights under Thailand's Personal Data Protection Act (PDPA).

What we collect: your name, email address, WhatsApp or phone number and nationality; your hotel, room number and pickup details; the number and ages of guests; food preferences, allergies and special requests you choose to tell us; and your booking and payment history with us. Card payments are handled by Stripe — we never see your card number.

Why we use it: to arrange and run your trip (pickup, boat, crew and food), to contact you about your booking, to take payments and refunds, and to keep the accounting records the law requires. We do not sell your information and we do not send marketing without your permission.

Who sees it: our team, and your captain and crew for the details they need on the day. We use trusted service providers who process data for us: Stripe (payments), Resend (booking emails), Google (our team calendar), Supabase (our database) and Vercel (website hosting). Some of them store data outside Thailand under their own data-protection safeguards.

How long we keep it: booking and payment records are kept for as long as Thai tax and accounting rules require. Allergy and food notes are only used for your trip.

Cookies: the public website does not use advertising or tracking cookies. Our team uses a sign-in cookie for the booking system.

Your rights: you can ask to see, correct or delete your information, or object to how we use it, by contacting us by email or WhatsApp. We will reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee.