PRIVACY POLICY

This Privacy Policy explains how SKY LUGE ADVENTURE Co., Ltd. (operating as "Hanuman Luge") and Chamnanthang Co., Ltd. (operating as "ONEBOOKING" for online payment processing) collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy and complying with the Thailand Personal Data Protection Act (PDPA) and other applicable data protection laws.

For the purposes of this Privacy Policy:

• SKY LUGE ADVENTURE Co., Ltd. is the data controller for information related to your visit, activities, and general customer service.
• Chamnanthang Co., Ltd. (ONEBOOKING) is the data controller for online booking and payment processing. Your credit card statement will display payments as "ONEBOOKING".

We use the information we collect to:

• Process and manage your bookings
• Send booking confirmations, reminders, and updates
• Arrange transportation and pickup services
• Provide customer support and respond to inquiries
• Process payments and refunds
• Improve our services, website, and user experience
• Comply with legal and regulatory obligations
• Send promotional communications (only with your explicit consent)
• Analyze website usage and performance

We process your personal data based on:

• Contract: To fulfill our booking agreement with you
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with tax, accounting, and safety regulations

We may share your information with:

• Payment Processors: Stripe processes all online payments on behalf of Chamnanthang Co., Ltd. (ONEBOOKING)
• Email Service Providers: To send booking confirmations and communications (e.g., Resend)
• Transportation Partners: Hotel and pickup location details for transfer arrangements
• Analytics Providers: Aggregated, anonymized data for website analytics
• Legal Authorities: When required by law, court order, or to protect our legal rights

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission (HTTPS)
• Secure database storage with access controls
• Regular security assessments and updates
• PCI-DSS compliant payment processing through Stripe
• Employee training on data protection
• Incident response procedures

Under the Thailand Personal Data Protection Act, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Restriction: Request limitation of processing in certain circumstances
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications at any time
• Complaint: Lodge a complaint with the Personal Data Protection Committee

To exercise these rights, please contact us using the details in Section 15.

Our website uses cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for targeted advertising (with consent)

Our website may contain links to third-party websites (e.g., social media, payment providers, map services). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal information.

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. Bookings for minors must be made by a parent or legal guardian. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

We retain your personal information for:

• Booking Records: 7 years (for tax and accounting purposes)
• Marketing Preferences: Until you withdraw consent
• Website Analytics: 26 months (anonymized)
• Customer Support Records: 3 years after last interaction

After the retention period, data is securely deleted or anonymized.

Your information may be transferred to and processed in countries other than Thailand, including:

• United States (Stripe payment processing, cloud services)
• European Union (email services)

We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. For significant changes, we will notify you by email or prominent notice on our website.

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us: