Privacy Policy

Who we are

Five Star Thailand Tours ("we", "us") runs private boat tours from Koh Phi Phi, Krabi and Phuket. This policy explains what personal information we collect through fivestarthailandtours.com and our messaging channels, why we collect it, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

What we collect

When you enquire or book a tour, we collect:

• Your name, email address, phone and WhatsApp number
• Your nationality and country, and the number and ages of the guests in your group
• Your hotel or pick-up location, tour date, start location and tour choices
• Allergies or dietary needs you tell us about, so we can prepare your lunch safely
• Messages you send us on WhatsApp, LINE, email or our website chat
• Reviews and photos you choose to share with us

Card payments are handled by our payment providers (Stripe, Omise and PayPal). We never see or store your full card number.

When you visit the website we also collect basic usage information, such as the pages you view and the device and browser you use, through cookies and similar technologies (see "Cookies and advertising" below).

How we use it

• To confirm and run your tour: arranging your boat, guide, pick-up and lunch
• To take deposits and payments, and to process refunds
• To contact you before and after your tour, for example with meeting details or weather updates
• To share the photos taken on your tour with you
• To ask for a review after your tour
• To improve our website and tours, and to measure our advertising
• To meet our legal and accounting obligations

Who we share it with

We only share your information with people who help us run your tour or our business:

• Your tour guide and boat crew, who receive the details they need for your day
• Payment providers: Stripe, Omise and PayPal
• Messaging and email services: WhatsApp, LINE, respond.io and Resend
• Hosting, database and storage: Vercel, Supabase and Google (Drive, Calendar and Sheets)
• Booking platforms such as GetYourGuide, if you booked through them
• Analytics and advertising services: Google, Meta and Reddit (see below)

Some of these services store data outside Thailand. We only use providers that protect personal data to a standard that meets the PDPA. We never sell your personal information.

Cookies and advertising

We use cookies and similar technologies to keep the website working (for example, remembering your booking while you check out), to understand how visitors use the site, and to measure our advertising. These include Google Ads, the Meta Pixel, the Reddit Pixel, Vercel Analytics and our own analytics.

You can block or delete cookies in your browser settings. You can also manage ad personalisation in your Google and Meta account settings.

How long we keep it

We keep booking records for as long as Thai accounting and tax law requires, and other information only as long as we need it for the purposes above.

Your rights

Under the PDPA you can ask us to:

• Give you a copy of the personal information we hold about you
• Correct information that is wrong or incomplete
• Delete your information, or stop or limit how we use it
• Stop sending you marketing messages
• Withdraw any consent you have given us

To make a request, contact us using the details below. You also have the right to complain to Thailand's Personal Data Protection Committee.

Contact us

For any question about your personal information, email us at hello@fivestarthailandtours.com or message us on WhatsApp +66 (0) 98 353 8365. See also our Cancellation Policy and Weather Policy.