Privacy policy
We collect only what a booking and the support around it require, under Thailand's Personal Data Protection Act (PDPA).
Data controller
What we collect
Name, email, phone, special requests, each room's guest name, stay details, tax-invoice details (if requested) and payment status. We never store card numbers; card data stays with our payment provider.
My Trips (optional)
If you use My Trips, we keep the email you sign in with, the cities you pin (city level; never your own location), your deal-email choice and the photos you upload. Photos are private to you, resized, and stripped of location (GPS) and camera data before they are stored. We don't use them for anything else or publish them; sharing happens only when you make an image and post it yourself. This rests on your consent, which you can withdraw any time.
Why we use it
To make the booking you asked for (contract), send confirmations and support you, issue tax invoices as the law requires, and prevent fraud.
Who we share it with
Our hotel wholesale partner and the hotel you book, to make the booking · Opn Payments (Omise), to take payment · Resend, to email confirmations and sign-in links · Cloudflare, to host the site, store My Trips data and photos, and count visits without cookies.
Maps (OpenFreeMap / OpenStreetMap) and fonts (Google Fonts) load from third parties, who see your IP address as any web request does.
Transfers abroad
Booking a hotel abroad requires sending the booking details to our supplier and the hotel in that country.
Cookies and browser storage
We use no advertising or tracking cookies. The only cookie is a strictly necessary one (sc_trips) set when you sign in to My Trips, to keep you signed in (180 days, or until you sign out). Recent searches and saved items stay in your own browser, and you can clear them any time.
How long we keep it
Booking records are kept as long as tax and accounting law requires (generally five years), then deleted or anonymised. My Trips data and photos are kept until you delete them. Deleting the account closes it at once and erases it for good within 7 days (you can cancel from the link in our email until then). Sign-in links expire after 20 minutes and are deleted within a day.
Your rights
What we don't do
We do not sell personal data, and we do not send marketing email unless you opted in.