1. Introduction

This Privacy Policy explains how Sky World Adventures Co., Ltd.(operating as "Hanuman World") and Chamnanthang Co., Ltd.(operating as "ONEBOOKING" for online payment processing) collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy and complying with the Thailand Personal Data Protection Act (PDPA) and other applicable data protection laws.

2. Data Controllers

For the purposes of this Privacy Policy:

Sky World Adventures Co., Ltd. is the data controller for information related to your visit, activities, and general customer service.
Chamnanthang Co., Ltd. (ONEBOOKING) is the data controller for online booking and payment processing. Your credit card statement will display payments as "ONEBOOKING".

3. Information We Collect

3.1 Personal Information

We may collect personal information that you provide to us, including:

Name (first and last)
Email address
Phone number and country code
Hotel name and room number (for pickup services)
Special requests, dietary requirements, or accessibility needs

3.2 Payment Information

Payment information is processed securely by our payment processor, Stripe. We do not store your full credit card details on our servers. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payment industry.

3.3 Automatically Collected Information

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on each page
Referring website or source
Geographic location (country/region level)

4. How We Use Your Information

We use the information we collect to:

Process and manage your bookings
Send booking confirmations, reminders, and updates
Arrange transportation and pickup services
Provide customer support and respond to inquiries
Process payments and refunds
Improve our services, website, and user experience
Comply with legal and regulatory obligations
Send promotional communications (only with your explicit consent)
Analyze website usage and performance

5. Legal Basis for Processing

We process your personal data based on:

Contract: To fulfill our booking agreement with you
Consent: For marketing communications and non-essential cookies
Legitimate Interest: To improve our services and prevent fraud
Legal Obligation: To comply with tax, accounting, and safety regulations

6. Information Sharing

We may share your information with:

Payment Processors: Stripe processes all online payments on behalf of Chamnanthang Co., Ltd. (ONEBOOKING)
Email Service Providers: To send booking confirmations and communications (e.g., Resend)
Transportation Partners: Hotel and pickup location details for transfer arrangements
Analytics Providers: Aggregated, anonymized data for website analytics (e.g., Google Analytics)
Legal Authorities: When required by law, court order, or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

SSL/TLS encryption for all data transmission (HTTPS)
Secure database storage with access controls
Regular security assessments and updates
PCI-DSS compliant payment processing through Stripe
Employee training on data protection
Incident response procedures

8. Your Rights Under PDPA

Under the Thailand Personal Data Protection Act, you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data (subject to legal retention requirements)
Restriction: Request limitation of processing in certain circumstances
Data Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for marketing communications at any time
Complaint: Lodge a complaint with the Personal Data Protection Committee

To exercise these rights, please contact us using the details in Section 14.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Types of cookies we use:

Essential Cookies: Required for website functionality
Analytics Cookies: Help us understand website usage
Marketing Cookies: Used for targeted advertising (with consent)

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, payment providers, map services). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. Bookings for minors must be made by a parent or legal guardian. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

12. Data Retention

We retain your personal information for:

Booking Records: 7 years (for tax and accounting purposes)
Marketing Preferences: Until you withdraw consent
Website Analytics: 26 months (anonymized)
Customer Support Records: 3 years after last interaction

After the retention period, data is securely deleted or anonymized.

13. International Data Transfers

Your information may be transferred to and processed in countries other than Thailand, including:

United States (Stripe payment processing, cloud services)
European Union (email services)

We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. For significant changes, we will notify you by email or prominent notice on our website.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:

For General Inquiries (Sky World Adventures Co., Ltd.)

Email: privacy@hanumanworldphuket.com
Phone: +66 62 979 5533
Address: 105 Moo.4 Muang, Chaofah Road. T.Wichit, Muang, Phuket 83000

For Payment & Booking Inquiries (Chamnanthang Co., Ltd. / ONEBOOKING)

Email: support@onebooking.co
Website: onebooking.co