Legal

Privacy policy

This page is maintained by The Pattaya Guide Co., Ltd. to explain, under Thailand's Personal Data Protection Act (PDPA), what Pattaya.Guide does with personal data. It describes our own practices; it is not an independent certification.

What we collect

Anonymous device ID. A random identifier stored in your browser so the AI Guide can find your past conversations. It is not linked to your name unless you give us your email address separately.

AI Guide conversations and queries. Your chat threads are stored in your browser. The text of what you ask the AI Guide, the area you asked about, and whether we had a curated place to answer with, are logged on our servers against your device ID so we can see what visitors actually need and where our coverage has gaps.

Email addresses given voluntarily. If you give us your email, for example to receive an itinerary, we store it with the time you agreed to that and where in the product you gave it.

Technical request records. Every request our servers answer is recorded so we can measure traffic quality, protect the site, tell real visitors apart from crawlers and bots, and report honest visitor numbers. Each record holds the path requested, the HTTP status we returned, the browser or bot user agent, the country, the network or ASN details our hosting provider gives us where available, and a one way salted hash derived from the connecting IP address. We do not store raw IP addresses, and the hash cannot be turned back into an address.

Partner enquiries and accounts. The business and contact details you type into the enquiry form, including whether your business is a registered Thai company, so we can invoice correctly; and, if you become a partner, the email address you sign in with and your billing and tax records.

Why we collect it, and our legal basis

We process AI Guide queries and device IDs on the basis of our legitimate interest in operating and improving the guide, including deciding which businesses to feature. We process technical request records on the basis of our legitimate interest in the security, integrity and honest measurement of the site. We process email addresses you give us, and partner enquiry details, on the basis of consent and to take steps you asked for before entering a contract. We process partner billing data to perform our contract with partners and to meet Thai tax obligations.

Who processes it

We use named service providers to run the site, acting on our instructions only: our hosting and database provider, the AI model provider that generates AI Guide answers, our email provider for notifications, and Stripe for partner billing. We do not sell personal data.

How long we keep it

Chat threads live in your browser and are removed when you clear them or your browser storage. AI Guide records, including the question text you type and the device ID attached to it, are kept for up to 12 months so we can improve answers and measure demand, then deleted automatically by a nightly job. Page and place view records are also kept for up to 12 months and deleted the same way. Technical request records are kept for 90 days and then deleted automatically every night. Email addresses are kept until you ask us to delete them or, for itinerary emails, until 12 months after the last conversation they relate to. Partner enquiries are kept while we are in contact and for a reasonable period afterwards. Partner billing records are kept for as long as Thai tax law requires.

Your rights under the PDPA

Thai law gives you the right to be informed, to access your data, to have it corrected, to have it deleted or anonymised, to restrict or object to our processing, and to withdraw consent at any time. Withdrawing consent does not affect processing we already did while consent was in place.

How to ask for access or deletion

Use our data deletion request form with your email address or anonymous device ID, or send us a message through our contact form. We aim to respond within 30 days.

Security

Access to partner, billing and query data is restricted to accounts that need it, and the site is served over HTTPS. If you believe you have found a security issue, tell us through our contact form and we will look into it.