← Back to ThaiRelax

Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how ThaiRelax Wellness Co., Ltd. ("ThaiRelax", "we", "us") collects, uses, shares and protects personal data when you visit this website or book an in-room massage session. We handle personal data in line with Thailand's Personal Data Protection Act (PDPA) B.E. 2562.

1. Data we collect

Information you give us when booking:

• Your name.
• The address, hotel, villa or condominium and room number where the session takes place.
• Preferred date and time.
• Treatment type and number of guests.
• A contact channel and handle — WhatsApp, Telegram or LINE number or username, or an email address.
• Any health information you choose to disclose so the session can be delivered safely, such as pregnancy, injuries or allergies. This is sensitive data and we treat it accordingly.

Information collected automatically: your IP address, browser type and version, device type, referring page, pages viewed, and the date and time of your visit.

We do not collect payment card details. Payment is made after the session in cash or by bank transfer, so no card data passes through this website.

2. How we use your data

• To confirm, schedule and deliver your massage session, and to assign a suitable therapist.
• To contact you about your booking, including arrival updates and changes.
• To deliver the session safely, where you have disclosed relevant health information.
• To handle payment, complaints, refunds and disputes.
• To meet accounting and legal obligations.
• To understand how the website is used and improve it.
• To measure the performance of our advertising, in aggregate.

We rely on the performance of a contract with you for booking data, your explicit consent for health information, our legitimate interest for site analytics and security, and legal obligation for accounting records.

3. Cookies, analytics and advertising technology

This website uses cookies and similar technologies. Strictly necessary cookies keep the site working and cannot be switched off. Analytics and advertising technologies help us understand traffic and measure ad campaigns; these may set cookies or similar identifiers and may collect an IP address, device information and pages viewed.

This site includes a third-party advertising measurement tag (Mgid Sensor) that records anonymous visit and conversion signals for campaign reporting. It does not collect your name, address or contact details.

You can block or delete cookies in your browser settings. Doing so may affect how parts of the site behave. Most mobile operating systems also allow you to limit ad tracking at the device level.

4. Sharing your data

We do not sell your personal data. We share it only as follows:

• Your therapist — the name, address, time and treatment needed to attend your booking, plus any health information relevant to their safety and yours.
• Messaging platforms — WhatsApp, Telegram and LINE process the messages you exchange with us under their own privacy policies.
• Service providers — website hosting, analytics and advertising measurement partners, acting on our instructions.
• Payment and banking — where a transfer is made, your bank and ours process the transaction.
• Authorities — where disclosure is required by Thai law, a court order, or to protect the safety of a guest or therapist.

Some of these providers operate outside Thailand. Where data is transferred abroad, we take reasonable steps to ensure an adequate level of protection.

5. How long we keep it

• Booking records: up to 24 months after your session, to handle repeat bookings and disputes.
• Health information you disclose: deleted within 12 months of the session unless you book again.
• Accounting records: as long as Thai tax law requires, generally five years.
• Website analytics: typically up to 14 months in aggregated or pseudonymised form.
• Messaging conversations: retained on the platform concerned according to its own settings and policies.

6. Your rights

Subject to Thai law, you may ask us to:

• Confirm what personal data we hold about you and give you a copy.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer have a lawful reason to keep.
• Restrict or object to certain processing, including analytics and marketing measurement.
• Withdraw consent you previously gave, including consent to process health information. Withdrawal does not affect processing that already took place.
• Receive your data in a portable, machine-readable format.

Write to us at the address below and we will respond within 30 days. You also have the right to complain to Thailand's Personal Data Protection Committee.

7. Security

We limit access to booking information to the staff and therapists who need it, use encrypted connections for this website, and require our therapists to keep everything they learn about a guest confidential. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted over the internet or through third-party messaging apps.

8. Children

This website is not directed at children. We do not knowingly collect personal data from anyone under 18 except where a parent or legal guardian books on their behalf. If you believe a child's data has been given to us, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy as our practices or the law change. The current version is always published on this page, with the revision date shown above. Significant changes will be highlighted on the website.

10. Contact