top of page

Privacy Policy

Privacy Policy

1.Introduction

This Privacy Policy (“Policy”) describes how Oxygen Tour Koh Tao (“the Company”, “we”, “us”, or “our”) collects, uses, discloses, and/or processes your personal data (“Personal Data”) in connection with booking and using our services, including snorkeling tours around Koh Tao/Koh Nangyuan and viewpoint driving tours on Koh Tao.

We are committed to protecting your Personal Data and processing it in compliance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA) and other applicable laws.

2.Personal Data We Collect

We may collect and process various types of Personal Data for the purpose of providing services to you:

Category of Personal Data                Example of Data Collected                              Purpose of Collection

Identity Data

     

​

​

 

Contact Data

​​

​​

​

Transaction &

Payment Data

​​

​

Sensitive Health Data

​​

​

​

Other Data                                                        

Name-Surname, Gender, Nationality, Copy of Passport (where necessary)

                                                     

To confirm bookings, issue necessary documentation/tickets, verify identity, ensure safety compliance, and arrange travel insurance (if applicable).

Address, Email address, Telephone number, LINE/WhatsApp ID

To communicate with you regarding your booking, send booking confirmations, and provide service updates or notifications.

Booking details, Service date/time, Bank or credit card information (only as necessary for payment processing)

To confirm payments, issue receipts, manage accounting records, and process refunds (if applicable).

Known allergies, critical health conditions relevant to snorkeling (e.g., existing medical conditions)

For safety planning and to ensure appropriate equipment or service provision (requires explicit consent).

Photographs or videos taken during the tour

For marketing and promotional activities showcasing the Company's activities (if consent is provided).

3.Legal Basis and Purposes of Processing

We process your Personal Data based on the following legal grounds (lawful bases):

Legal Basis                       Primary Purpose of Data Use

Contractual Necessity

​

​

Consent

​

​

Legal Obligation

​

​

​

Legitimate Interest

To fulfill your request for services, perform the tour services, and manage communications related to your booking.

Using health data for safety, using photos/videos for promotion, and sending marketing communications and promotions.

To comply with relevant laws, such as maritime regulations, accounting, tax laws, or requests from government authorities.

To improve service quality, prevent fraud, and manage customer relations effectively.

4.Disclosure of Personal Data

We may disclose your Personal Data to third parties strictly under lawful bases and only as necessary, including:

  • External Service Providers: Such as hotels or accommodation providers (for pick-up/drop-off services), boat operators (if not using the Company's own vessels), insurance agents, and payment service providers.

  • Government Agencies: Such as the Marine Department, Tourist Police, or other regulatory bodies as required by law.

  • Business Partners: In cases of joint activities or tours, and where you have provided consent.

5.Data Security Measures

We implement appropriate security measures to protect your Personal Data from unauthorized access, use, alteration, disclosure, or destruction. We store your data in a secure environment and limit access to those employees who have a legitimate need to know.

6.Retention Period

We will retain your Personal Data for as long as is necessary to fulfill the purposes outlined in this Policy, or for the duration required by applicable laws.

7.Your Rights as a Data Subject

Under the PDPA, you, as the data subject, have the following rights regarding your Personal Data:

  • Right of Access: To request access and obtain a copy of your Personal Data.

  • Right to Rectification: To request the correction of inaccurate or incomplete data.

  • Right to Erasure: To request the deletion or destruction of your Personal Data.

  • Right to Withdraw Consent: To withdraw the consent you have given at any time (withdrawal will not affect the lawfulness of processing carried out prior to withdrawal).

  • Right to Object: To object to the processing of your data in certain cases.

  • Right to Restriction of Processing: To request the suspension of the use of your Personal Data.

To exercise any of these rights, please contact us using the details provided in Section 8.

8.Contact Us

If you have any questions, suggestions, or wish to exercise your data subject rights, please contact us:

Data Controller: Oxygen Tour Koh Tao

  • Address: 8/38 Moo. 2, Mae Haad Village, Koh Tao, Koh Phangan, Suratthani 84360

  • Telephone: +6677-456-326 

  • WhatApps: +6689-909-4690

  • Email: oxygenkohtao@gmail.com

bottom of page