Draft for review by a Thai lawyer before launch. Not yet legal advice or a final policy.
Privacy policy
This policy explains what Hi Phuket collects and why, in line with Thailand's Personal Data Protection Act (PDPA) and, for visitors from the EU and UK, the GDPR.
What we collect
- Account details: name, email, mobile number, date of birth, nationality, and optionally gender.
- Optional preferences: the area you are staying in, your interests, and how you heard about us.
- Membership activity: purchases, refunds, and the perks you use (partner, date and time).
- We do not store your card number. Payments are processed by Stripe.
Why we use it
- To run your membership, check your card at partners, and prevent misuse (contract).
- To send offers and news, only if you agreed (consent).
- To personalise the perks you see using your interests and stay area, only if you agreed (consent).
Who sees it
- Partner staff see your name, membership dates and today's perk count when they scan your card.
- Our service providers: Supabase (database), Stripe (payments), Vercel (hosting).
- We never sell your data.
Your rights
You can access, correct or delete your data and withdraw consent at any time. Email hello@hiphuket.net. We keep payment records as long as Thai tax law requires.