1. Who is responsible
Patio Chiang Mai is operated by Pat Chirawatchanakun (ภัทร์ จิรวัจนกุล), Chiang Mai, Thailand.
Questions or privacy requests may be sent to patrickpatiothai@gmail.com or +66 95 940 3962.
2. Information we collect
- Booking contact details: lead traveller name, email address, optional WhatsApp number and Chiang Mai hotel.
- Trip details: programme, package, stadium or ticket type, travel date, time and party size.
- Traveller details: each traveller’s legal full name, adult or child type, and health or assistance information supplied for insurance and safe tour operation.
- Payment and service records: booking number, payment status, transaction references, receipt details, correspondence and technical security logs.
3. Why we use it
- To check availability, create and manage bookings, arrange hotel pick-up and provide customer support.
- To arrange tour operations and travel insurance, including handling health information with your explicit consent.
- If online payment is enabled in a future release, to process payments, prevent fraud, keep transaction and accounting records, and meet legal obligations.
4. Who receives information
We share only what is reasonably needed with tour or activity providers, transport operators, venues, insurers or insurance coordinators, Cloudflare as our hosting and storage provider, professional advisers, and authorities where the law requires it. Online payment is not currently available. If the checkout displays Omise Test Mode during an authorised test, payment details are sent directly to Omise for simulated processing; Patio will not store your full card number. Omise Test Mode uses simulated payments and does not charge real money.
5. How long we keep it
- Health and medical details: deleted within 30 days after the tour is completed or the booking is cancelled.
- Traveller names and insurance-related records: kept for 1 year after the tour or cancellation.
- Booking, payment and receipt records: kept for 5 years for accounting, dispute and legal purposes.
- After these periods, records are deleted or anonymised. Anonymous totals that cannot identify a person may be kept for business reporting.
6. Your choices and rights
You may ask to access, correct or delete your personal information, withdraw consent where processing depends on consent, or raise a concern. Some booking or accounting records may still need to be retained where required by law or to establish legal claims. Contact us using the details above.
7. Security and international services
We use access controls, encryption for stored medical details and service providers designed to protect information. No online system can guarantee absolute security. Some providers may process information outside Thailand under their own safeguards and applicable law.
8. Changes
We may update this policy when our services or legal duties change. The current version and effective date will appear on this page.