Data Protection Policy
This data protection policy outlines how Thai-TDAC collects, uses, and protects your personal information in compliance with Thailand's Personal Data Protection Act (PDPA) and international data protection standards.
Information We Collect
We collect personal information through legitimate and transparent methods, strictly adhering to the principle of data minimization and purpose limitation as outlined in the PDPA.
Categories of Personal Data:
- Identity details including full name, birth date, and citizenship information
- Travel documentation such as passport numbers and visa details
- Itinerary information including travel dates and accommodation bookings
- Communication details including email addresses and telephone numbers
- Financial information required for payment processing
- Travel preferences and previous application history
How We Use Your Information
We process your personal data only for specified, explicit, and legitimate purposes as permitted under the PDPA. Your data is never used beyond the scope necessary for achieving these stated purposes.
Primary Uses:
- Facilitate TDAC application processing and submission
- Coordinate with Thai immigration services
- Provide comprehensive customer support and assistance
- Execute secure payment processing and transactions
- Enhance service quality and user experience
- Communicate essential travel updates and notifications
- Fulfill regulatory and compliance obligations
- Implement security measures against fraud and misuse
Data Security Measures
We have implemented comprehensive technical and organizational measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction.
Security Measures:
- Advanced encryption for data transmission and storage
- Secure infrastructure with certified data centers
- Role-based access controls and authorization protocols
- Continuous security monitoring and vulnerability testing
- Robust backup systems for data recovery and business continuity
- Regular security audits and compliance assessments
Information Sharing
We maintain strict control over your personal data and share it only when legally required or with your explicit consent, following the principle of data minimization.
We may share your information with:
- Thai immigration authorities for TDAC processing requirements
- Secure payment processing partners for transaction handling
- Regulatory bodies when mandated by applicable laws
- Verified service providers under strict data protection agreements
- Legal authorities when required for compliance or investigation
Your Rights
Under the PDPA, you have fundamental rights regarding your personal data. We respect and facilitate the exercise of these rights in accordance with applicable legal requirements.
Your Data Rights:
- Right to Access: Obtain confirmation and copies of your processed personal data
- Right to Rectification: Correct or update incomplete or inaccurate information
- Right to Erasure: Request deletion of your personal data under certain conditions
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for certain purposes
- Right to Restrict Processing: Limit how we use your data in certain circumstances
Data Retention
We adhere to strict data retention principles, keeping your personal information only for the duration necessary to fulfill the stated purposes and comply with legal obligations.
Retention Periods:
- Processing Period: Data retained throughout active TDAC processing and travel completion
- Legal Compliance: Application records maintained for 7 years per regulatory requirements
- Financial Records: Transaction data kept for 7 years for taxation and audit purposes
- Service History: Customer interaction records retained for 3 years post-final engagement
- Marketing Data: Contact information kept until you opt out or request deletion
Cookies and Tracking
Our website employs various tracking technologies to improve user experience and service delivery, all implemented with full transparency and user control.
Types of Cookies:
- Functional Cookies: Essential for core website operations and security
- Performance Analytics: Anonymous usage data to optimize our platform
- User Preferences: Storage of your customized settings and choices
- Content Personalization: Relevant information and promotional content delivery
- Security Cookies: Protect against fraud and ensure secure transactions
Contacting us
If you have any questions, concerns, or complaints regarding this Data Protection Policy, we encourage you to contact us using the details below:
- Email Support: support@thai-tdac.com
This document was last updated on Nov 15, 2025
We are not a government website or resource. We strive to provide accurate information and offer assistance to travelers.