Privacy Policy

Last updated: June 25, 2026

Elephant Retirement Park ("we," "our," "us") values your privacy. This Privacy Policy explains how we collect, use, retain, and disclose your personal data when you use our website, tour booking, and other services.

1. Personal Data We Collect

We may collect the following personal data:

Identity Data: Name, email, phone number, country
Booking Data: Tour date, number of adults/children, hotel, pickup time, dietary notes
Payment Data: Transaction data processed via Ksher payment gateway (we do not store credit card or bank account details)
Contact Data: Messages you send us through the contact form
Technical Data: IP address, browser type, operating system, pages visited

2. Purposes of Data Collection

We collect your data for the following purposes:

Processing tour bookings and providing services you request
Processing payments through the Ksher gateway
Sending booking and payment confirmation emails
Contacting you regarding your booking or inquiries
Improving our website and services
Complying with legal obligations

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contractual Necessity: To process bookings and provide services
Consent: When you explicitly provide consent by submitting forms
Legitimate Interests: To improve services and maintain website security
Legal Obligation: To comply with applicable laws

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy or as required by law. Generally, we retain booking data for 2 years from the date of service.

5. Data Sharing with Third Parties

We may share your personal data with third parties in the following cases:

Payment Processor: Ksher for payment processing
Email Service Provider: For sending confirmation and notification emails
Government Authorities: When required by law or by order of competent authorities

We do not sell your personal data to third parties.

6. Data Subject Rights

Under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights:

Right of Access: Request a copy of your personal data we hold
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request restriction of processing
Right to Data Portability: Request transfer of your data in a readable format
Right to Object: Object to collection, use, or disclosure of your data
Right to Withdraw Consent: Withdraw consent you have given

You may exercise these rights by contacting us through the channels below. We will respond within 30 days of receiving your request.

7. Security Measures

We implement appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including SSL/TLS encryption for data transmission and access-controlled storage systems.

8. Cookies

We use cookies to enhance your browsing experience and analyze site traffic. You can configure your browser to reject cookies, but this may affect certain website functionalities.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via our website or email.

10. Contact Us

If you have any questions or wish to exercise your rights, please contact us at:

Email: info@elephantretirementpark.com
Phone: +66 81 234 5678
Address: 123 Moo 4, Doi Saket, Chiang Mai, Thailand