Privacy Policy
ThaiSeva · Last updated 11 October 2026 · Version 2.0
Your information, explained simply
We use information you provide to create your account, arrange bookings and answer enquiries. Authorized staff and relevant providers use the details needed to fulfil your request. Firebase supports accounts and stored records; Stripe processes card payments.
This notice explains processing. It does not ask you to consent to every use of data. Optional website analytics requires your choice in Cookie Preferences. You can reject it and still use account and booking services.
1. Who this notice covers
THAI SEVA TRAVEL AND SERVICE CO., LTD. (ThaiSeva) is responsible as data controller for information processed through this website and its connected account, booking and support services. Contact the team responsible for privacy at support@thaiseva.com or through our contact page.
69/235 Omni Tower Building, Ground Floor, Room No. 69/29, Soi Sukhumvit 4, Sukhumvit Road, Khlong Toei Subdistrict, Khlong Toei District, Bangkok, Thailand.Company Registration Number: 0105567071964
2. What we collect and why
We collect information entered in forms, supplied in support conversations and generated while using the service. The details needed for each service are described below and in the form. Without required details, we may be unable to create your account, arrange a booking or answer your request. Please do not send passwords, full card details or unnecessary identity documents in messages.
| Service | Information | Purpose and choice |
|---|---|---|
| Account/profile | Email, name, phone, account ID and optional profile photo. Google sign-in can supply your name, email and photo. Passwords are handled by Firebase Authentication. | Create and secure accounts, verify email and coordinate services. Required fields are needed for account features; photos are optional. |
| Bookings/payments | Guest/contact details, stay/travel dates, party size, pickup/destination where needed, requests, booking reference, amount and payment status. | Arrange bookings, coordinate providers, process payments and handle refunds. Required booking fields are needed for the service; extra requests are optional. |
| Contact/support | Name, email, phone, account ID, message/chat contents and related bookings. Contact forms also record your IP address. | Answer enquiries, resolve problems and prevent misuse. Required form fields are needed to submit the enquiry. |
| Security/usage | Sessions, IP addresses, request metadata and technical logs. Optional analytics can include page visits, browser/device information and interactions. | Operate and protect the service. Optional analytics helps understand usage and can be rejected without preventing bookings. |
| Business listings | Business/listing information and hotel/partner contact details supplied to us. | Publish/manage listings and coordinate services. Public listing information is visible to visitors. |
Account, booking and payment processing takes steps at your request and fulfils the service contract. Essential security and fraud prevention rely on legitimate interests balanced against your rights. Legal obligations may require some records. Optional analytics relies on consent. We ask separately where another optional use requires permission.
3. Who receives information
- Authorized staff: account, booking and support details needed for operational work.
- Relevant hotels, tour/transport providers and other service partners: guest names, contact details and arrangements needed to fulfil your request.
- Google/Firebase: authentication, database, file storage and website analytics if you choose it.
- Stripe: checkout/payment details that may include email, references, amount, product details and transaction metadata. Stripe handles card details; our booking database does not store full card numbers or CVVs.
- Email/notification providers: destination address or device token and content needed to deliver verification codes or service updates.
- Authorities or advisers: information needed for applicable legal requirements, disputes or protection of rights.
Some providers operate outside Thailand, so information may be processed overseas. Contact us for the providers, locations and transfer safeguards applicable to your information. See also the Google Privacy Policy and Stripe Privacy Policy.
4. Retention and deletion
These are cleanup schedules, not promises of instant deletion from every system. Legal holds, disputes and records requiring review can affect the result.
- Account/profile
- Kept while your account is active. Deletion removes supported account records and starts review of related records.
- Contact enquiries
- Scheduled for cleanup after 90 days, unless a dispute or legal hold applies.
- Support messages
- Scheduled for cleanup after two years where reliable message dates are available.
- Completed-trip location details
- Scheduled for removal after 90 days where a reliable completion date is available.
- Terminal booking/transaction records
- Completed, cancelled or rejected records are scheduled for cleanup five years after both creation and completion/cancellation/rejection, unless a dispute or legal hold applies. Unresolved bookings are reviewed separately.
- Records requiring review/external copies
- Missing dates, outstanding disputes, provider copies, logs, downloaded exports and backups require separate review. A deletion request does not instantly erase every copy. Contact us for the retention information applicable to your request.
Request deletion through Delete Account or email us. We verify requests, remove supported account records and review related records. Where continued retention is necessary, we explain the reason and restrict further use where appropriate.
5. Cookies and consent
Essential session/security storage helps the website work. Optional analytics stays off until you choose it. Use the cookie banner to accept, reject or choose optional categories. Change or withdraw that choice through Cookie Preferences in the footer or the button above. Withdrawal stops future optional collection; it does not undo earlier lawful processing.
Preferences are saved in your browser for up to six months. A different browser, expired preference or cleared storage requires a new choice. See the Cookie Policy. Location features, when offered, use browser/device permission, which you can revoke in its settings.
6. Your rights
Subject to applicable conditions under Thailand's PDPA, you may request access/a copy, correction, deletion, restriction or portability, or object to processing. You may withdraw consent for consent-based processing and complain to Thailand's Personal Data Protection Committee.
Email support@thaiseva.com with your request and account email or booking reference. Do not send your password. We may ask for proportionate identity verification and explain the outcome and any legal/retention limitations. We handle access requests within the applicable statutory timeframe, generally no more than 30 days; other requests follow their applicable requirements.
7. Security
We use authentication, access controls and encrypted connections to protect information. No service guarantees absolute security. Keep your sign-in details private and report suspected misuse to our support email or contact page.
8. Changes
We update this notice when processing changes and show the revision date above. Where a new purpose requires consent, we ask before that optional processing starts. Continued website use does not automatically give consent to optional tracking or a new optional purpose.