This policy explains what personal information Angthong Marine Park collects when you use this website, why we collect it, who we share it with, and what rights you have over it. It applies to angthongboattours.com and to bookings and enquiries made through it.
This website is operated by Koh Tour Co., Ltd., a tour company registered in Thailand.
Koh Tour Co., Ltd. is the data controller for the information described below. If you want to exercise any of the rights in this policy, or you have a question about how we handle your information, write to us at info@angthongboattours.com.
We only collect information you give us, plus basic technical data your browser sends automatically. We do not buy personal data from third parties.
When you make a booking, we collect your name, email address, phone number, the number and type of guests in your party, your tour date and departure time, your pickup location or hotel where relevant, and any special requests, dietary notes or accessibility needs you choose to tell us.
When you pay by card, your card details are entered directly into our payment provider's secure form. We never see or store your full card number, expiry date or security code. See the Payments section below.
When you contact us through the contact form, email, WhatsApp or live chat, we collect your name, your contact details and whatever you write in your message.
When you browse the site, our hosting and analytics providers record standard technical information: IP address, browser and device type, referring page, the pages you view and the time of your visit. See Cookies and analytics below.
We do not operate customer accounts on this website, so there is no login, password or stored profile.
We use your information to:
Our legal bases are performance of a contract with you (taking and delivering your booking), compliance with a legal obligation (tax and licensing records), and our legitimate interests in running and improving the business. Where we rely on your consent, such as marketing email, you can withdraw it at any time.
We will only send you marketing email if you ask us to. Every marketing message includes an unsubscribe link. Booking confirmations and messages about a tour you have booked are not marketing and are sent regardless.
Card, Apple Pay, Google Pay and PromptPay payments are processed by Stripe. Your payment details are submitted directly to Stripe and are not stored on our servers. Stripe acts as an independent data controller for the payment data it handles, under its own privacy policy at stripe.com/privacy.
We receive from Stripe only the information we need to reconcile your booking: whether the payment succeeded, the amount, the currency, and the last four digits and card brand.
Where you choose to pay on the day of the tour, no card details are collected by this website at all.
Cookies are small files stored by your browser. This website uses them for two purposes.
Strictly necessary cookies keep the site working: holding your booking in progress, remembering your currency preference, and securing the payment step. The site cannot function without these.
Analytics cookies help us understand which pages and tours people look at, so we can improve the site. We use Google Analytics and Google Tag Manager for this. The data is aggregated and we do not use it to identify individual visitors.
We also use Crisp to provide live chat. If you open the chat window, Crisp sets a cookie so your conversation continues across pages.
You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop the booking flow from working.
We do not sell your personal information, and we do not share it for other companies' advertising.
We share it only with:
Some of these providers are located outside Thailand, so your information may be transferred abroad. Where that happens we rely on the provider's contractual data protection commitments and, for transfers out of the EEA, on standard contractual clauses.
We keep booking records for as long as Thai accounting and tax law requires, currently five years from the end of the relevant financial year. Enquiries that do not become bookings are deleted within 24 months. Analytics data is retained on the shorter retention window offered by our analytics provider.
Under the Thai Personal Data Protection Act, and under the GDPR if you are in the European Economic Area or the United Kingdom, you have the right to:
Write to info@angthongboattours.com to exercise any of these. We will respond within 30 days. We may ask you to confirm your identity first, so we do not disclose your information to someone else.
Children are welcome on our tours, and we collect a child's name and age only as part of a booking made by their parent or guardian. This website is not directed at children, and we do not knowingly collect personal information directly from anyone under 16. If you believe a child has given us their information directly, contact us and we will delete it.
The website is served entirely over HTTPS. Payment details go directly to Stripe and never reach our servers. Access to booking records is limited to staff who need it to run your tour. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.
Our pages sometimes link to other websites, such as review sites or the national park's own pages. We are not responsible for their content or their privacy practices. Read their policies before giving them your information.
We may update this policy as our services or the law change. The date shown at the top of this page is when it was last revised. If we make a significant change affecting how we use your information, we will say so clearly on this page.
Questions, requests or complaints about privacy go to info@angthongboattours.com, or by post to Koh Tour Co., Ltd., 9/61 Moo 5, Tambon Bophut, Koh Samui, Surat Thani 84320, Thailand. We answer email daily between 07:00 and 22:00 Thailand time (GMT+7).