Privacy Policy

Last Updated: June 17, 2026

HikeTak ("we", "us", or "our") operates the website and tour booking system. We are committed to protecting your personal data in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) and other applicable privacy laws.

This Privacy Policy describes how we collect, use, disclose, and protect the personal data of customers who use our services, including bookings, register accounts, and browse our website.

1. Personal Data We Collect

To provide booking services, we collect the following categories of personal data:

  • Identity Info: Full name, age, national ID or passport number, and date of birth (for travel insurance and manifest purposes).
  • Contact Info: Email address, phone number, and emergency contact details (emergency name, phone number, and relationship).
  • Booking Details: Selected tours, travel dates, passenger lists, and special requests (e.g., dietary requirements, allergies).
  • Payment Info: Bank transfer slips and payment verification details (verified using SlipOK automated system).

2. Purposes of Processing Data

We process your personal data for the following purposes:

  • To manage, process, and confirm your tour bookings and registration.
  • To issue travel insurance for all travelers in compliance with local tourism regulations.
  • To verify payments automatically via upload of transfer slips.
  • To contact you regarding tour updates, scheduling adjustments, or in emergencies.

3. Data Security & Storage

We store your data securely in a Cloudflare D1 database and store uploaded files (like receipts or avatars) in encrypted Cloudflare R2 buckets. Access to your personal data is restricted to authorized admins for operational purposes only. We retain your data only for as long as necessary to fulfill the services or comply with legal requirements.

4. Data Subject Rights (PDPA)

Under the PDPA, you possess key rights regarding your data, including:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data under certain conditions.
  • Right to Withdraw Consent: Withdraw your consent for processing at any time.

To exercise any of these rights, please contact our support team at contact@hiketak.com.