Privacy notice
Last updated 19 September 2026
This site is a guide for our guests in Phuket, Khao Lak and Koh Samui. It works without an account and without cookies. Below is everything it does with data, in plain words.
Who is responsible
Siam Travel Center Co., Ltd., 156/33 Moo 5, T. Rassada, Muang Phuket, Phuket 83000, Thailand, operates siam.travel and is the controller for the processing described here. You reach us at concierge@siam.travel or on WhatsApp and by phone at +66 80 678 9888.
Thailand's Personal Data Protection Act (PDPA) applies to us. For visitors from the EU, the EEA, the United Kingdom and Switzerland, the GDPR, the UK GDPR and the Swiss Data Protection Act apply as well; the rights below follow them.
What this site does not do
It sets no cookies. It has no user accounts, no login, no newsletter form, no advertising network and no social-media buttons that report back. Fonts are served from our own server, so opening a page sends nothing to Google or any other font service.
Server logs (hosting)
The site is hosted by Vercel Inc., USA, on servers close to you. Every request is logged for a short time with the IP address, time, requested page, browser type and the referring page. That is what is technically needed to deliver the page and to detect abuse (legitimate interest, Art. 6(1)(f) GDPR). Vercel processes the data on our behalf under standard contractual clauses.
Visitor statistics without cookies
We count visits with PostHog (PostHog Inc.), with all data stored in the European Union (Frankfurt). We use its cookieless mode: nothing is stored on your device — no cookie, no local storage identifier. To tell visits apart within one day, PostHog's servers compute a hash from your IP address, browser and this site that changes daily and cannot be reversed. The IP address goes into that hash and nothing else; it is not stored and not used to locate you.
What we record: the pages you view, how long you stay, the page or link you came from (including campaign tags on links we send our guests), device type, browser language and time zone, and taps on outbound links — a restaurant's website, phone number, map link or our WhatsApp button — as well as when you add a place to "My List" or share a page. We see counts and trends, not people. The purpose is to learn which content helps our guests and to show partners how often their listing is viewed (legitimate interest, Art. 6(1)(f) GDPR).
"My List"
Places you save are kept only in your own browser (local storage) and are never sent to us. Clearing your browser's site data removes the list.
Writing to us on WhatsApp, by phone or by email
When you tap a WhatsApp button, WhatsApp opens on your device with a pre-written message; nothing is sent until you press send. WhatsApp (WhatsApp Ireland Limited for the EU; Meta Platforms) processes your message under its own terms. Once your message reaches us, we receive your phone number, your profile name and what you wrote. Our concierge line runs on a customer-messaging platform (respond.io), which stores the conversation on our behalf.
We use the conversation to answer you and, if you book, to arrange the excursion or transfer with the operator: date, party size, hotel and pickup time (performance of a contract, Art. 6(1)(b) GDPR). We keep conversations for as long as the trip and the legal record-keeping duties require, then delete them.
Guests of our partner tour operators
If you travel with one of the tour operators we work for, they pass us your name, arrival and departure details, hotel, number of travellers and — where you gave it to them — your mobile number, so that we can organise your transfer and send you your arrival information by WhatsApp: pickup time, your contact person, and a link to this guide. This is part of the travel service you booked (Art. 6(1)(b) GDPR). Reply at any time if you do not want these messages; we stop immediately.
Links to other sites
Listings link to the venues' own websites, to Google Maps for directions and to our sister site for villas. Once you follow such a link, that site's privacy notice applies.
Your rights
You can ask us which data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Write to concierge@siam.travel. You may also complain to a data-protection authority — for visitors from the EU, the one in your country of residence; in Thailand, the Personal Data Protection Committee.
Changes
We will update this notice when the site changes. The date at the top tells you which version you are reading.