Privacy Policy.
This Privacy Policy explains how Insiders Concierge (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you visit our website, contact us, or use our concierge and travel services. By engaging with us, you agree to the practices described below.
1. Who we are (Data Controller)
Insiders Concierge is a Thailand-registered concierge and travel curation company serving clients worldwide. For all personal data we process, we act as the data controller.
Contact: ask@insidersconcierge.com
2. What data we collect
A. Identity & contact
Name, email, phone/WhatsApp, social handle, billing details, emergency contact (if provided).
B. Trip & preference details
Travel dates, destinations, group size, interests (e.g., music, dining, wellness), dietary preferences/allergies (only if you choose to share), language needs, accessibility needs, “must-haves”.
C. Official/travel documents (when needed)
Passport/visa details or images only where required to secure bookings (e.g., hotels, flights, venue checks). We request the minimum necessary.
D. Transaction & booking data
Requested services, invoices, bank transfer/ Wise payment confirmations, credits/refunds, itinerary details. We do notprocess or store card numbers.
E. Communications
Messages exchanged via email, our website forms, Typeform (the “Quick Quiz”), WhatsApp, and scheduling notes.
F. Technical & usage data (website)
Log data such as IP address, device/browser information, time zone, pages viewed, and events captured via Google Analytics 4 (GA4) cookies/SDK. See “Cookies & Analytics” below.
3. Why we use your data (purposes & legal bases)
We process personal data for:
Service delivery (Contract):
Reviewing your brief, curating options, securing bookings, handling changes and support.
Providing on-trip “Digital Butler” assistance.
Legitimate interests (balanced against your rights):
Running, improving, and securing our services and website.
Communicating with you about quotes, logistics, and service quality.
Preventing fraud or misuse.
Legal obligations:
Accounting, tax, compliance, and responding to lawful requests.
Consent (when required):
Processing special-category data you choose to share (e.g., health-related dietary needs).
Optional marketing (if enabled in future).
You may withdraw consent at any time by emailing ask@insidersconcierge.com.
4. Sharing your data
We share data only as needed to deliver services and run our business:
Suppliers/partners (e.g., hotels, villas, drivers, restaurants, venues, guides, ticketing, yacht/boat, wellness providers).
Processors & tools (examples):
Squarespace (site hosting), Typeform (client quiz), Google (Workspace, GA4), Scheduling (Acuity/Squarespace), WhatsApp (messaging), Wise / banks (payments).
Professional services (accounting, legal) and authorities where required by law.
We require suppliers and processors to protect your data and use it only for the intended purpose. We do not sell your personal data.
5. International transfers
Because we serve global clients and use international providers, your data may be transferred and stored outside Thailand. Where required, we use appropriate safeguards (e.g., contractual clauses and security measures) and share only what’s necessary for your booking or our operations.
6. Retention of data
We keep data only as long as needed for the purpose collected, or to meet legal/operational requirements:
Booking & transaction records: typically 7 years (tax/accounting).
Trip preferences & communications: typically 2–3 years from last interaction (to support repeat trips), unless you ask us to delete sooner where we’re not required to retain them.
Copies of passports/visas: only for as long as required by the supplier or travel process, then deleted.
Website analytics: per tool defaults and our configuration.
We may anonymize data for analytics and service improvement.
7. Your rights
Subject to applicable law (including Thailand’s PDPA and, where relevant, GDPR-style rights), you can:
Access your data and receive a copy
Correct inaccurate or incomplete data
Delete data (where no longer needed and not legally required to retain)
Object to or restrict certain processing
Data portability (receive data you provided in a usable format)
Withdraw consent where processing relies on consent
To exercise any right, email us. If we cannot resolve your concern, you may lodge a complaint with the Thailand Personal Data Protection Committee (PDPC) or your local authority.
8. Cookies & analytics
We use essential cookies to run the site and analytics cookies (GA4) to understand usage and improve experience. GA4 may collect IP-derived location, device, and event data; we configure it to avoid collecting unnecessary personal identifiers.
Your choices:
Use our cookie/banner settings where available.
Manage cookies in your browser (block, delete).
If you do not want analytics, you can disable cookies or use browser add-ons that limit tracking.
Third-party embeds (e.g., Typeform) may set their own cookies when you use the quiz; see those providers’ policies for details.
9. Security
We apply reasonable technical and organizational measures to protect personal data (access controls, need-to-know sharing, secure transfer, and vendor due diligence). No method is 100% secure; please avoid sending sensitive information (e.g., full passport images) over unsecured channels where not necessary.
10. Children
Our services and website are not intended for children under 18. If you believe a child has provided us personal data without consent, contact ask@insidersconcierge.com and we will take appropriate steps.
11. Third-party links & messaging
Our site may link to third-party sites and services (e.g., suppliers, social platforms). Their privacy practices are their own. If you contact us via WhatsApp, your messages are processed by WhatsApp/Meta per their policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. Changes take effect when posted on our website. We’ll let you know about material updates where appropriate.