Privacy policy

Who we are

This website is run by Prawdziwa Tajlandia sp. z o.o. (KRS 0001181063, NIP 9472017337), ul. Piotrkowska 66/3, 90-105 Łódź, Poland ("we"). We are the controller of your personal data. For any question about your data, write to prawdziwatajlandia@gmail.com.

What data we collect

When you book a trip, we collect:

• your name, email and phone number (WhatsApp)
• the dates you chose and whether you travel solo or as a couple
• the payment status and amount. Card, BLIK and crypto payments are handled by Stripe and NOWPayments, and we never see your card details
• technical server logs kept by our hosting provider (IP address, browser, time of the visit) to keep the website secure

Why we use it

To handle your booking and contact you about the trip. The legal basis is the contract with you (art. 6(1)(b) GDPR).

To keep accounting and tax records, as the law requires (art. 6(1)(c) GDPR).

To keep the website secure, which is our legitimate interest (art. 6(1)(f) GDPR).

We don't send marketing emails and don't use cookies, analytics or any tracking.

Who receives your data

Only the services we need to run bookings, and only as far as they need it:

• Stripe: card, BLIK, Apple Pay and Google Pay payments
• NOWPayments: crypto payments
• Vercel: website hosting
• Telegram: we receive booking notifications in a private chat
• the developer who maintains the website, for technical support

Transfers outside the EU

Some of these providers process data outside the European Economic Area, for example in the USA. In that case the transfer relies on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

The trip takes place in Thailand and we work from there, so your booking details are also processed in Thailand. This is necessary to carry out the trip you booked (art. 49(1)(b) GDPR).

How long we keep it

We keep booking and payment data for 5 years after the trip, for accounting, and then delete it.

Your rights

You can ask us for a copy of your data, to correct or delete it, to limit its use, to receive it in a portable format, and you can object to its use based on our legitimate interest. Write to prawdziwatajlandia@gmail.com.

You can also complain to the data protection authority in your country. In Poland this is the President of the Personal Data Protection Office (UODO).

Other

We need your contact details to take your booking: without them we can't book the trip for you.

We don't make automated decisions or build profiles based on your data.

If this policy changes, we'll update it on this page and change the date at the top.