Privacy Policy
Effective April 2026
Information We Collect
When you submit an enquiry through our website or contact us directly, we may collect your name, company name, email address, destination preferences, travel dates, and group details such as passenger count and programme requirements. The site sets one functional cookie, NEXT_LOCALE, which remembers the language you chose. Our traffic analytics are cookieless and do not identify you individually. If you arrive from a campaign link, the referring URL and any campaign tags are held in your browser's sessionStorage for the length of that visit only, so an enquiry can be attributed to its source; that data is discarded when you close the tab, is never combined with an advertising profile, and is never sold. We run no advertising pixels and no third-party marketing trackers.
Lawful Basis for Processing
Where the EU or UK GDPR applies, we process enquiry data on the basis of steps taken at your request before entering into a contract, and on your consent where you have given it (Article 6(1)(b) and 6(1)(a)). Operational data for a confirmed programme is processed to perform that contract. Where we contact a travel-trade buyer about services relevant to their business, we rely on our legitimate interests (Article 6(1)(f)); you may object at any time and we will stop.
How We Use Your Information
The information you provide is used solely to respond to your enquiry, prepare quotations, and coordinate ground operations on your behalf. We will never sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose.
Who Processes Your Data
Pai Dai DMC is the data controller. We are registered in Thailand, operate from Bangkok, and have a second office in Ho Chi Minh City. We use a deliberately small set of processors, named here so you can assess them: Vercel Inc. (website hosting and cookieless traffic analytics), Resend (delivery of enquiry confirmations and requested documents by email), and Google LLC (Workspace email, and the Google Sheets API into which website enquiries are logged for our sales team). We use no advertising networks, no data brokers, and no customer-data platform.
Data Sharing
To fulfil your travel programme, we may share relevant details with hotels, transport providers, guides, and activity operators as strictly required. This sharing occurs only with your knowledge and consent, limited to the information each supplier needs to deliver their service. We do not share data with any party beyond what is necessary to operate your programme.
International Transfers
We operate in Thailand and Vietnam, and the suppliers who deliver your programme are located there. Arranging travel therefore requires transferring your data outside the EEA and the UK. Where that transfer is necessary for a contract you have entered into, or for steps taken at your request before entering one, we rely on Article 49(1)(b) and (c). Our hosting and email processors also operate infrastructure in the United States.
Data Retention
Enquiry and operational data is retained for up to two years from the date of collection for reference purposes. You may request deletion of your personal data at any time by contacting us, and we will action that request within 30 days.
Your Rights
If you are in the EEA or the United Kingdom, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing of it, to receive it in a portable form, and to withdraw consent at any time without affecting processing already carried out. Write to sales@paidaidmc.com and we will respond within 30 days. If you are not satisfied with our response, you have the right to complain to your national data protection supervisory authority.
Contact
For any questions regarding this policy or to request access to, correction of, or deletion of your personal data, please contact us at sales@paidaidmc.com.