Privacy Policy

1. Who We Are

2. What Data We Collect

We collect only the information needed to process and deliver your tour booking:

• Name— to personalise your booking and confirm identity on the day
• Email address— to send booking confirmation, reminders and receipts
• Phone number / WhatsApp— to contact you regarding your booking and pickup logistics
• Hotel name and pickup address— to arrange your private hotel collection
• Number of guests and ages— to plan transport and group size
• Tour preferences and special requirements— dietary needs, mobility requirements, any requests noted at booking
• Booking and payment records— date, tour booked, amount paid, transaction reference

We do not store your full payment card details. Payments are processed securely by our payment provider and are subject to their own privacy policy.

3. How We Use Your Data

We use your data for the following purposes:

• To process and confirm your tour booking
• To arrange hotel pickup and communicate logistics with your guide and transport provider
• To send booking confirmations, reminders and receipts
• To respond to enquiries made before, during or after your tour
• To manage cancellations, rescheduling and refunds
• To comply with our legal obligations under Thai law

We do not use your data for unsolicited marketing without your consent. We do not sell, rent or share your data with third parties for commercial purposes.

4. Legal Basis for Processing (GDPR)

For visitors from the European Union, we process your personal data on the following legal grounds:

• Performance of a contract— processing your booking and delivering the tour service
• Legitimate interests— communicating with you regarding your booking, managing cancellations and responding to enquiries
• Legal obligation— retaining booking records as required by Thai law

5. Who We Share Your Data With

We share your data only where necessary to deliver the service:

• Transport providers and drivers— name, pickup address and guest count, to coordinate your private collection
• Our TAT-licensed guides— full booking details to prepare and deliver your tour
• Payment processors— name and payment details to process your transaction securely

All third parties who handle your data are required to keep it confidential and use it only for the stated purpose.

6. Data Retention

We retain your personal data for the following periods:

• Booking records— 5 years from the date of the tour, as required under Thai accounting and business law
• Enquiry correspondence— 12 months from the date of last contact
• Cancelled bookings— 12 months from the cancellation date

After these periods, your data is securely deleted.

7. Cookies

This website uses only essential cookies required for the booking system to function. No tracking, advertising or analytics cookies are used.

8. International Data Transfers

HiMonika Tours is based in Thailand. If you are located in the European Union, your personal data will be transferred to and processed in Thailand. We take appropriate steps to ensure your data is protected in accordance with GDPR requirements, including processing it only for the purposes described in this policy and retaining it no longer than necessary.

9. Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

• Access— request a copy of the personal data we hold about you
• Correction— ask us to correct inaccurate or incomplete data
• Deletion— request that we delete your personal data, subject to our legal retention obligations
• Restriction— ask us to limit how we use your data in certain circumstances
• Data portability— request your data in a portable, machine-readable format (EU residents)
• Objection— object to processing based on legitimate interests
• Withdraw consent— where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@himonika.com. We will respond within 30 days.

10. Complaints

• Thailand: If you believe we have handled your data unlawfully, you may lodge a complaint with the Personal Data Protection Committee (PDPC) at pdpc.or.th.
• European Union: You may lodge a complaint with the data protection authority in your country of residence. For Germany, this is the relevant Landesbeauftragter für Datenschutz in your federal state.

11. Children's Data

Our booking service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. Guest information provided for children travelling as part of an adult-led group booking is collected solely for the purpose of tour logistics and is not used for any other purpose.

12. Changes to This Policy

We may update this policy from time to time. The current version is always available at himonika.com/privacy. Material changes will be notified by email to customers with active bookings.

13. Contact

For any questions about this policy or how we handle your data:

• 📧hello@himonika.com
• 📱WhatsApp Monika: +66 123 456 789
• 🌐himonika.com/privacy