Privacy Policy

1. Information We Collect

We collect the following information to process your booking and provide private transfer services:

• •Personal data: Full name, email address, phone number
• •Travel data: Date/time, route, passenger count, flight number
• •Payment data: Card type and last 4 digits only (we never store full card numbers — processed by Omise)
• •Technical data: IP address, browser type (automatic server logs)

2. How We Use Your Information

3. Sharing Your Information

We never sell your personal data. We may share information with the following service providers solely to fulfill your booking:

• •Omise Co., Ltd. — Payment processing (PCI-DSS compliant)
• •Resend Inc. — Booking confirmation emails
• •Vercel Inc. — Website hosting infrastructure
• •MongoDB Atlas — Database storage (Singapore servers)
• •Driver / transport partner — Name, phone, pickup time, flight number only

4. Data Retention

• •Booking records: 3 years from travel date (accounting and dispute purposes)
• •Cancelled or unpaid bookings: 90 days, then deleted

5. Your Rights (PDPA)

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you have the right to:

• •Access your personal data
• •Correct inaccurate data
• •Delete your data (unless legally required to retain)
• •Object to data processing
• •Data portability

6. Data Security

• •All connections use HTTPS (TLS 1.3)
• •We never store full credit card numbers
• •Database access is restricted to authorized administrators only

7. Cookies

We use cookies for session management and website functionality only. We do not use third-party tracking cookies (no Google Analytics or Meta Pixel).

8. Policy Updates

We may update this policy as needed. Material changes will be communicated by email or notice on the website. Continued use of our service after notification constitutes acceptance.