Privacy Policy

Effective date: the date this document is first published on the website.

1. General provisions

GET YOUR TRIP is an online travel marketplace operating from Thailand that helps users discover, compare and request tours, excursions, transfers, boat trips and other travel services supplied by independent operators in Asia. “GET YOUR TRIP”, “we”, “us” and “our” refer to the platform operator. This Policy explains what personal data we collect, why we process it, who may receive it, how it is protected and retained, and how to exercise your rights. It applies to getyourtrip.asia and the Get Your Trip mobile app. Where separate consent is required by applicable law, we request it separately.

2. Data controller

GET YOUR TRIP LLC
54/11 Soi Cokmakam, Viset Rd, Rawai, Phuket 83130, Thailand.
Contact: admin@getyourtrip.asia.

GET YOUR TRIP operates the marketplace. Independent tour operators, guides, transport providers, boat owners and other suppliers deliver the underlying services and may act as separate controllers of data needed to fulfil their services, under their own privacy notices.

3. Personal data we collect

Booking and request data: name, email, phone number, participant count, requested date and time, selected activity, meeting or transfer details, accommodation or flight information when necessary, age or date of birth when required for an activity, and comments you voluntarily provide.

Account data: name, email, phone number, securely stored password credentials where applicable, booking history, saved activities and preferences, and records of your acceptance of our Terms of Use and other documents (date, document version and how they were accepted). If you sign in with Apple, Google or Facebook, we may receive an account identifier, name and email as permitted by that provider. Apple may provide a private relay address if you choose Hide My Email. We do not receive your Apple, Google or Facebook password.

Payment data: the current mobile app does not collect payments in-app. Payments for confirmed bookings through other agreed channels may be processed by a payment provider or the payee. We may receive payment status, amount, currency, transaction reference and limited card details if supplied by the provider; we do not require full card numbers when the provider processes them directly.

Communications: messages and information you provide through email, chat, messengers or social media when contacting support.

Technical data: IP address, access times, device and operating system, browser (on the website), app version, technical identifiers needed for operation, language, requested pages, referral URL, connection information, usage events and crash/error diagnostics. A push token may be processed where notifications are enabled. We use these data for security, reliable operation, service notifications and troubleshooting. Marketing notifications require any permission mandated by law.

4. Purposes of processing

We process personal data before, during and after a trip as necessary to receive and assess booking requests; confirm availability separately with managers or suppliers; arrange confirmed services and transfers; contact you about changes; create and manage accounts, favourites and booking history; provide support; prevent fraud; maintain security; improve our website and app; and, where permitted, send promotional communications. You may opt out of marketing messages. Submitting a request is not itself confirmation of a booking.

5. Services provided by independent operators

We are a marketplace. Independent suppliers carry out the activities advertised. During request handling and after confirmation, we may share only the personal data reasonably needed to check availability or deliver the service, such as name, contact number, participant count, date, accommodation and transfer information. A supplier may have its own privacy policy.

6. Payments

Confirmed services may be paid for using channels agreed with the customer, including third-party payment providers. The current Get Your Trip mobile app does not offer in-app online payment. Payment providers process payment information under their own terms and notices. We receive only information needed to confirm and account for payments.

7. Cookies and similar technologies

Our website may use cookies for login, settings, security, booking functions, analytics, performance, personalisation and marketing where lawful. Essential cookies may be used where permitted without separate consent; other cookies require consent where applicable.

8. Analytics and marketing technologies

To understand how visitors use the website and to improve it, we use web analytics services:

• Google Analytics 4 (Google LLC / Google Ireland Limited) — visit statistics, pages viewed and actions on the website;
• Yandex Metrica (Yandex LLC) — visit statistics and click maps. Session recording (Webvisor) is not used.

These services are added through Google Tag Manager and load only after you click “Accept” in the cookie notice. If you click “Decline”, they are not loaded. You can change your choice at any time using the “Cookie settings” link at the bottom of the page.

The services receive technical data: a pseudonymous browser identifier stored in a cookie, the page address and title, the referring source, device and browser type, approximate location derived from the IP address, and events on the website (for example, opening the order form or the fact that a request was sent). Your name, phone number, email and request text are not sent to these services.

Advertising and remarketing features of these services are not used. Google and Yandex process the data under their own policies: Google Privacy Policy, Yandex Privacy Policy. Their servers may be located outside your country (see section 10).

9. Disclosure of personal data

We may share data, as needed, with tour and activity operators, transport companies, boat owners, hotels, payment providers, hosting/CDN and IT providers, email and communication providers, CRM and operational notification services (including amoCRM and Telegram where used for the relevant workflow), push notification providers, analytics providers, professional advisers and public authorities where required by law. We do not sell personal data as a standalone product.

10. International data transfers

We serve travellers and suppliers across different countries. Data may be processed or stored outside your country of residence. We take reasonable measures to protect transferred data in accordance with applicable law.

11. Children's data

Family bookings may include children's details. Such information should be supplied by a parent, guardian or person authorised to provide it, and only where necessary for the activity. We do not seek children's data for independent marketing.

12. Reviews

After an activity we may invite you to leave a review. Reviews may be published with the name or display identifier you provide. We may use reviews to improve the service and inform other users. Contact support to request removal. If you delete your account, published reviews remain but the author's name is removed.

13. Service communications

We may contact you about booking confirmations, meeting points, schedules, operator instructions, changes and cancellations. Service messages are separate from marketing communications, subject to applicable law.

14. Retention

We retain data only as long as necessary for the stated purposes or longer where legally required, taking into account bookings, accounting and tax obligations, disputes, security and legitimate interests. When no longer needed, data are deleted, anonymised or securely disposed of unless law requires retention. Retention periods depend on the category of data, processing purpose and applicable legal requirements.

15. Security

We take reasonable technical and organisational measures against unauthorised access, loss, alteration, destruction and unlawful disclosure. No internet-based transmission or storage system can guarantee absolute security.

16. Your rights

Depending on applicable law, you may have rights to information, access, correction, deletion, restriction, objection, portability, withdrawal of consent, marketing opt-out and complaints to a competent data protection authority. Certain rights may be limited in particular circumstances.

17. EEA and UK users

We operate from Thailand and serve users internationally. Where EU or UK data protection law, including the GDPR, applies to our processing, we respect applicable requirements and rights. Applicability depends on the relevant territorial scope and circumstances.

18. Legal bases

Depending on the purpose and applicable law, processing may be based on performance of a contract or requested service, legal obligations, legitimate interests, consent where required, vital interests or other lawful bases.

19. Privacy requests and account deletion

To exercise privacy rights, ask questions or request account deletion, contact admin@getyourtrip.asia and describe your request, the account or booking concerned (if applicable), and a safe way to reach you. Do not send passwords or full payment card details. We may ask for reasonable verification of identity. You can also delete your account yourself in the app — see below.

Deleting your account

You can delete your account in the app under “Profile → Delete account”, or by writing to the address above. Before deletion we ask you to confirm your identity — with your password, by signing in again with Apple or Google, or with a code sent to the account email. If the account was created with Apple, confirmation goes through Apple and we revoke the sign-in tokens Apple issued.

On deletion we immediately erase:

• your name, email, phone number, profile photo, messenger details and password;
• your Apple, Google and Facebook sign-in links;
• push notification tokens of your devices and notification settings;
• saved activities and likes;
• your support chat history on the website;
• contact details in requests that did not become bookings.

All sign-in sessions on the website and in the app are ended. Published reviews remain, without the author's name.

We keep — to perform bookings, meet accounting and tax obligations, settle with operators, handle disputes and establish, exercise or defend legal claims:

• booking records, including the contact details given in the booking;
• payment, refund and referral bonus records;
• records of your acceptance of our terms (date and document version);
• a service record that the account was deleted, without personal data.

These records are kept for the periods required by applicable law for the relevant documents and are then deleted or anonymised. Data previously shared with operators to perform a booking are handled by them under their own obligations.

Upcoming bookings are not cancelled when you delete your account and remain valid; a manager will contact you about them, and you can change or cancel them through support. Signing up again, including with the same email, creates a new account; previous bookings are not linked to it.

20. Changes

We may update this Policy as laws, technology, our services or business change. The published version will state its last update date. Please review it periodically.