Last updated: Aug 15, 2026
This Privacy Policy explains how Go Trawhale by Pla ("Go Trawhale", "we", "us"), TAT License 21/01368, registered at 57/44 Moo3, Tambon Buak-khang, Sankamphaeng, Chiang Mai 50130, Thailand, collects, uses, and protects personal data of visitors to our website and clients booking our tour packages, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
2.1 When you make an inquiry or booking, we may collect: full name, email address, phone number, passport details (for booking flights, hotels, and activities), payment/billing information, travel dates and preferences, and any special requests you provide.
2.2 If you request Partner Rate access as a trade partner, we collect your company name, business license number (if provided), website, and contact details.
2.3 We do not collect any health data as part of a wellness or medical screening process — see Section 5.1. However, if you voluntarily disclose food allergies, dietary restrictions, or pre-existing medical conditions relevant to your safety during the trip, we collect and use this limited information solely for that purpose, with your explicit consent, as described in Section 5.5.
3.1 We use personal data to: process and confirm bookings; arrange flights, hotels, guides, and activities on your behalf; communicate with you about your trip; and respond to inquiries.
3.2 The primary legal basis for processing is contractual necessity — the data is required to deliver the travel services you have requested. Where data is used for marketing communications, we rely on your consent, which you may withdraw at any time (see Section 11).
4.1 To deliver your booking, we share necessary personal data (such as name, passport details, and travel dates) with third-party suppliers including hotels, domestic airlines, boat/transport operators, and local guides.
4.2 For packages that include a health screening component, we share your name and basic contact details with the accredited healthcare facility solely to schedule your appointment. We do not receive, and the facility does not share with us, any health information about you. See Section 5 for details.
4.3 We use standard business tools (including email and booking/communication software) to process inquiries and bookings. Where these tools store data outside Thailand, we take reasonable steps to ensure such transfers meet PDPA cross-border transfer requirements, as set out in Section 12.
4.4 We do not sell personal data to third parties for their own marketing purposes.
This section applies to any package that includes a health screening component.
5.1 Go Trawhale does not collect, store, process, or have access to any health data, medical history, or wellness screening results generated by that screening.
5.2 The health screening is conducted directly by an independent healthcare facility accredited to Joint Commission International (JCI) standards. All medical information you provide, and all screening results, are held solely between you and the facility, under the facility's own separate privacy and consent procedures.
5.3 Go Trawhale's role is limited to coordinating your appointment date and time using your name and basic contact details — no health information passes through Go Trawhale at any point.
5.4 For questions about how the facility handles your health data, please contact the facility directly.
5.5 Where you voluntarily disclose food allergies, dietary restrictions, or pre-existing medical conditions relevant to trip safety (see Section 10.3 of our Terms & Conditions), we collect and retain this information solely to coordinate appropriate precautions with guides, restaurants, and activity providers on your behalf. As this is sensitive personal data under the PDPA, we collect it only with your explicit consent, obtained at the time you provide this information (for example, via a consent checkbox on our booking form). This information is shared only with personnel directly involved in delivering your trip, strictly on a need-to-know basis, and is not used for any other purpose.
6.1 Where a booking includes a traveler under 18, we collect the same categories of data (name, passport details) as for adult travelers, provided by the booking parent or guardian.
6.2 For any traveler under 10 years of age, we require the consent of a parent or legal guardian before collecting their personal data, in accordance with PDPA requirements.
7.1 Our website uses essential cookies required for basic site functionality, and may use non-essential cookies (such as analytics tools) to help us understand how visitors use our site.
7.2 Where non-essential cookies are used, a cookie consent banner will request your permission before such cookies are set. You may adjust your cookie preferences at any time through your browser settings.
8.1 We retain booking and inquiry data for 24 months after trip completion, after which it is securely deleted, except where longer retention is required by Thai law (for example, financial and tax records, which are retained for 5 years in accordance with statutory requirements).
9.1 We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure, including restricting data access to authorized staff and using secure, password-protected systems for data storage.
10.1 You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent at any time; and object to certain processing.
10.2 To exercise any of these rights, contact us at info@gotrawhale.com. We will respond within a reasonable timeframe as required under the PDPA.
11.1 We will only send you marketing emails (e.g. promotions, new packages) if you have separately opted in to receive them. This is distinct from operational emails related to an active booking.
11.2 You may unsubscribe from marketing communications at any time via the link provided in each email, or by contacting info@gotrawhale.com.
12.1 As our clients may be based internationally, some personal data may be processed or stored using tools based outside Thailand. Where this occurs, we take appropriate steps to safeguard such transfers in accordance with applicable data protection law, and limit transferred data to what is necessary to deliver your booking.
13.1 We may update this Privacy Policy from time to time. Each update will be reflected by a revised "Last updated" date at the top of this document.
Please feel free to contact us.