Privacy Policy

Flat-style privacy icons with green leaf background accent, symbolizing consent and data protection

Last updated: 9 May 2025

1. Who We Are

Welcome to Thailand Insider Guide (https://thailandinsiderguide.com), an independent website offering travel and expat information about Thailand. This privacy policy explains how we collect, use, and protect your data.

Data Controller:

Thailand Insider Guide
Thailand

For privacy-related questions, you can contact us at:
📧 privacy [at] thailandinsiderguide.com

2. What Data We Collect and Why

We collect personal and non-personal data for the following purposes:

a. When You Contact Us

  • Data collected: Name, email address, and message content
  • Purpose: To respond to your inquiries and maintain a record of our communications
  • Legal basis: Consent and legitimate interest
  • Retention period: We retain contact form data for up to 2 years after resolution of your inquiry to maintain continuity in our communications and improve our services. For certain types of inquiries that may have ongoing relevance (such as legal matters or business partnerships), we may retain data for longer periods as necessary.

b. When You Subscribe to Our Newsletter

  • Data collected: Email address
  • Processor: MailerLite
  • Purpose: To send occasional updates and tips
  • Legal basis: Consent
  • Retention period: Until you unsubscribe
  • You can unsubscribe at any time via the link in any email.

c. When You Visit Our Website

We use analytics and embedded content to understand site usage and improve functionality.

  • Tool: Google Analytics 4
    • Data collected: IP address (anonymized), device information, browser information, pages visited, time on site
    • Purpose: To analyze website traffic and performance
    • Legal basis: Consent (cookies)
    • Retention period: 14 months
    • Non–consenting users: If you do not accept cookies, we may still track basic, anonymous and cookie-free data (e.g. via session memory or server logs) under our legitimate interest in maintaining site quality.
  • Tool: Instagram Embeds
    • Data collected: Viewing information, IP address when interacting with embedded content
    • Purpose: To display embedded Instagram content
    • Legal basis: Consent (third-party content may place cookies)
    • Retention period: Controlled by Meta/Instagram

3. Use of Cookies and Consent

Types of Cookies We Use

  • Essential cookies: Necessary for website functionality (legal basis: legitimate interest)
  • Preference cookies: Remember your settings and preferences (legal basis: consent)
  • Analytics cookies: Help us understand how visitors use our site (legal basis: consent)
  • Marketing cookies: Track you across websites to display relevant ads (legal basis: consent)

Cookies are only set after consent using our Complianz system. You can manage or withdraw your consent at any time via the cookie banner or by clicking Preferences in the website footer.

Some features may not function optimally without cookies.

For detailed information about the specific cookies we use, their purposes and lifespans, please view our Cookie Policy.

4. Data Processors and International Transfers

We use third-party services that process your data on our behalf:

  • MailerLite (email marketing)
  • Google Analytics (GA4)
    • Based in: USA
    • Transfer safeguards: Standard Contractual Clauses (SCCs)
    • Privacy policy
  • Instagram / Meta embeds
    • Based in: USA
    • Transfer safeguards: Standard Contractual Clauses (SCCs)
    • Privacy policy

Following the invalidation of the EU-US Privacy Shield, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission for data transfers to non-EU countries. However, we acknowledge that these may not provide the same level of protection as within the EU. By consenting to these services, you acknowledge this risk.

5. Legal Basis for Processing

We rely on the following legal grounds for processing your personal data:

  • Consent: For newsletter signup, cookies, and tracking tools
  • Legitimate interest: For essential website operations and anonymous performance tracking for non-consenting users
  • Contractual necessity: When providing services you’ve requested
  • Legal obligation: When required by law

6. Your Rights (EU/EEA Residents)

Under the GDPR, you have the right to:

  • Access your data
  • Correct inaccuracies
  • Withdraw consent at any time
  • Request deletion (right to be forgotten)
  • Restrict or object to processing
  • Data portability (receive your data in a structured, machine-readable format)
  • Lodge a complaint with your data protection authority

We will respond to all legitimate requests within one month. To exercise your rights, contact us at: 📧privacy [at] thailandinsiderguide.com

7. Data Retention

  • Newsletter subscriptions: We retain email addresses as long as you are subscribed.
  • Analytics data: Anonymous analytics data may be retained for up to 14 months.
  • Contact form messages: Kept only as long as needed to handle your request (typically up to 6 months).
  • Server logs: Retained for up to 90 days for security purposes.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (SSL/TLS)
  • Regular security assessments
  • Access controls and authentication
  • Regular security updates and patches

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Automated Decision Making

We do not engage in automated decision-making or profiling that would produce legal or similarly significant effects for you.

10. Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

11. Children

This website is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you are under 16, please do not provide any personal information on this site.

12. Updates

This privacy policy may be updated from time to time. Changes will be posted on this page with a revised “last updated” date. For significant changes, we will provide a more prominent notice or email notification.

13. Complaints

If you are unhappy with how we handle your data, you have the right to complain to your local data protection authority. However, we would appreciate the chance to address your concerns before you approach the authority, so please contact us first.