Privacy Policy

1. Introduction

SabaiGo (“we”) respects your privacy. This policy explains how we collect, use, and disclose personal data when you use our website and booking services.

This policy aligns with Thailand’s Personal Data Protection Act (PDPA).

2. Data we collect

Account data: when you sign in with LINE, Google, or Facebook, we may receive your name, email, and provider identifiers as permitted by you.

Booking data: contact name, email, phone, date, time, number of guests, booked activities, and notes.

Payment data: transfer slips, amounts, and payment status. We do not store card numbers directly — online payments are processed by authorised payment providers.

Technical data: cookies required for login, language preferences, and core site functionality.

3. How we use data

To process bookings, confirm payments, and communicate booking status.

To send booking and payment confirmation emails.

To improve our services, prevent fraud, and comply with legal obligations.

4. Third-party sharing

We use trusted providers such as Supabase (database and auth), Resend (email), and payment providers (e.g. Xendit). Data is shared only as needed to deliver the service.

We may share booking details with activity operators to fulfil your reservation.

We do not sell your personal data to third parties.

5. Retention and security

We retain data as long as needed for service delivery, legal compliance, and dispute resolution.

We apply appropriate security measures, including HTTPS encryption and access controls.

6. Your rights

Under PDPA, you may request access, correction, deletion, or objection to processing of your personal data by contacting us.

You may opt out of marketing communications at any time.

7. Contact

For privacy questions or PDPA requests, please contact us using the email in the website footer.