Privacy Policy

Krabi Info Group keeps this policy short because we hold very little about a visitor in the first place. There is no account system on this site and no payment ever passes through our hands, so most of what follows is about search activity, the odd email, and the analytics that keep the site running properly.

Who is responsible for your data

Krabi Info Group is the controller for the data described on this page, and we can be reached at [email protected]. There is no phone line for this network; email reaches us fastest and is checked regularly. Once a booking moves onto our rental partner's own checkout, that partner becomes the controller for whatever a visitor types in there, such as licence and payment details, and its own policy takes over from ours.

What we actually gather

A search on this site sends the pickup point, the return point and the dates to our booking partner so it can answer with what is on the board that day, and a copy of that same search sits in the visitor's own browser for a few minutes purely so a second page load does not repeat the query. Ordinary technical signals arrive too: an IP address, browser and device type, the page a visitor came from, and which pages they read. If someone writes to us or leaves a review, we keep whatever they chose to type, including any name they attach to it.

Why we are allowed to process it

Running the search a visitor asked for and answering an email both rest on our legitimate interest in operating the service, and on taking the steps a visitor requested before any rental contract is even formed. Anything beyond that, chiefly analytics, only runs once consent has been given through the cookie notice, and that consent can be withdrawn just as easily as it was given.

Who we share it with

Search results and any booking a visitor starts are handled by our car rental booking partner, which is how live prices reach the page. We also use a hosting provider and a content delivery network to keep the site fast and secure, and a separate analytics service to see which pages are actually useful. None of these companies are allowed to use what we send them for their own marketing, and we do not sell data to anyone or hand it to advertisers.

Sending data outside your own region

Because visitors reach this site from many countries and Thailand sits outside the European Economic Area, some processing happens on servers located abroad. Where it does, we rely on the safeguards the law provides for that, such as the standard contractual clauses published by the European Commission, or an adequacy finding covering the destination.

How long things are kept

A cached search disappears from the browser within minutes on its own. Server logs are rotated out after a short operational window. An email thread is kept only for as long as it stays useful, plus a modest buffer in case the same visitor writes back about the same trip.

Your rights under the GDPR

If you are covered by the GDPR or an equivalent law, the table below sets out what you can ask us for. Email [email protected] and we aim to respond within one calendar month.

Security and younger visitors

The site is served over an encrypted connection throughout, and access to the little data we hold is limited to people who need it to run the service. No method of transmitting data over the internet can be called perfectly secure, so this is a commitment to reasonable care rather than a guarantee. Since driving here requires a full licence, nobody under sixteen is a realistic visitor and we do not set out to collect anything from that age group; if you think a young person's details reached us regardless, tell us and we will take the record down.

If this policy changes

We revise this page whenever the service, its providers or the underlying law move, and the copy published here on the day a visitor reads it is the version that applies to them.

Questions about your data? Contact us at [email protected]. See also our Cookie Policy and Terms & Conditions.