Find Your Thailand Privacy Notice
Effective October 11, 2026
Your Privacy Matters to Us
At Find Your Thailand, we respect your privacy and are committed to protecting your personal information.
You are in control of the information you provide to us, subject to the information necessary for delivering the Services you request.
This Privacy Notice explains how the Tourism Authority of Thailand (“TAT”, “we”, “us” or “our”) collects, uses, discloses, stores, and protects your personal information when you access or use Find Your Thailand.
We encourage you to read this Privacy Notice carefully to understand how your personal information is processed and how you can exercise your rights.
1. Introduction and Scope
This Privacy Notice applies to users and members of the Find Your Thailand web application (“Platform”) and its associated services, activities, campaigns, and membership features (“Services”).
This Notice applies to personal information collected directly from you, automatically through your use of the Platform, or from authorized third parties.
It should be read together with any applicable Cookie Notice or campaign-specific privacy information.
This Notice does not govern the independent processing of personal information by third-party websites, applications, or service providers that operate under their own privacy policies.
2. About Us and the Data Controller
Find Your Thailand is operated by the Tourism Authority of Thailand (TAT), which acts as the data controller responsible for determining the purposes and means of processing personal information for the Platform.
TAT is a juristic person established under the Tourism Authority of Thailand Act B.E. 2522 (1979).
Principal Office: Tourism Authority of Thailand 1600 New Phetchaburi Road, Makkasan, Ratchathewi, Bangkok 10400, Thailand.
TAT is committed to processing personal information transparently and responsibly in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other applicable laws.
3. Personal Information We Collect
Depending on the Services you use, we may collect the following categories of personal information.
- 3.1
Identification and Registration Information
- Full name or nickname
- Nationality
- Country or region of residence
- Date of birth or age, where required
- Preferred language
- Membership identification number
- Other information voluntarily provided during registration
- 3.2
Contact Information
- Email address
- Mobile phone number
- LINE or WeChat account identifiers, where applicable
- Other contact details provided by you
- 3.3
Travel Preferences and Interests
- Preferred destinations and attractions
- Tourism interests and preferred experiences
- Selected tourism themes or activities
- Travel preferences voluntarily provided by members
- Responses to surveys or questionnaires
- 3.4
Membership and Activity Information
- Membership registration and account history
- Participation in tourism activities or campaigns
- Check-in records and mission submissions
- Reward points earned, redeemed, adjusted, or expired
- Redemption history and privilege usage
- Photographs, videos, or other supporting evidence submitted by members
- 3.5
Technical and Usage Information
- IP address
- Device and browser information
- Operating system and language settings
- Cookies and similar technologies
- Login and session records
- Pages viewed and Platform interaction history
- Security and diagnostic logs
- 3.6
Location Information
Where location-based features are offered, we may process location information necessary to support check-ins, nearby attraction recommendations, or location-based activities.
Precise device location will be accessed only where enabled by the relevant feature and permitted through applicable device or browser settings and legal requirements.
4. Sources of Personal Information
We may obtain your personal information from:
- 4.1
Information provided directly by you
This includes information submitted during registration, profile updates, surveys, activity participation, reward redemption, and communications with us.
- 4.2
Information collected automatically
Certain technical and usage information may be collected when you access or interact with the Platform.
- 4.3
Connected third-party platforms
Where you choose to register or sign in through Google, LINE, WeChat, or another supported platform, we may receive information authorized through that service, such as a platform-specific user identifier or profile information.
The information shared depends on the permissions you grant and the applicable platform’s privacy settings.
- 4.4
Participating partners and service providers
We may receive information necessary to verify participation, confirm reward redemption, resolve service issues, or prevent fraudulent activities, where permitted by law.
5. Purposes of Processing Personal Information
We may process your personal information for the following purposes:
- 5.1
Membership Registration and Management
To register members, verify accounts, maintain membership profiles, and provide secure access to the Platform.
- 5.2
Delivery of Services
To provide tourism information, interactive experiences, activity participation, and membership privileges.
- 5.3
Activity and Reward Administration
To verify check-ins, evaluate mission submissions, award points, process redemptions, and maintain accurate activity records.
- 5.4
Personalization
To understand members’ tourism interests and preferences and provide relevant recommendations, content, or experiences.
- 5.5
Communications
To send necessary service notifications, membership updates, redemption confirmations, security alerts, and responses to inquiries.
- 5.6
Marketing and Promotional Activities
Where permitted by law and subject to any required consent, to send tourism news, special offers, campaign announcements, and promotional information relevant to members’ interests.
- 5.7
Analytics and Service Improvement
To analyze Platform usage, evaluate campaign performance, understand visitor interests, and improve tourism products, services, and digital experiences.
Where appropriate, aggregated or anonymized information may be used for statistical reporting and tourism development purposes.
- 5.8
Security and Fraud Prevention
To detect, prevent, and investigate unauthorized access, fraudulent submissions, duplicate accounts, reward manipulation, or other misuse.
- 5.9
Legal and Regulatory Compliance
To comply with applicable laws, regulations, lawful requests, and legal obligations.
6. Legal Bases for Processing
We process personal information only where an appropriate legal basis applies under the PDPA.
Depending on the purpose and circumstances, these legal bases may include:
- 6.1
Contractual Necessity
Where processing is necessary to provide Services requested by you, including membership registration, account administration, and participation in applicable activities.
- 6.2
Legal Obligation
Where processing is necessary to comply with applicable laws or regulatory requirements.
- 6.3
Public Task or Official Authority
Where processing is necessary for TAT to perform a task in the public interest or exercise official authority vested in it by law.
- 6.4
Legitimate Interests
Where processing is necessary for legitimate interests pursued by TAT or relevant parties, provided that such interests are not overridden by your fundamental rights and freedoms.
- 6.5
Consent
Where required by law, we will obtain your consent before processing personal information for specific purposes, such as certain marketing activities, optional tracking technologies, or other processing requiring consent.
You may withdraw your consent at any time, subject to applicable legal conditions.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Disclosure of Personal Information
We may disclose personal information to authorized recipients where necessary for the purposes described in this Notice and where permitted by law.
Such recipients may include:
- 7.1
Service Providers
Technology providers, website and application developers, hosting providers, cloud service providers, customer support providers, and other contractors processing information on our behalf.
- 7.2
Participating Tourism Partners
Hotels, attractions, tourism operators, activity organizers, or other participating businesses where limited information is necessary to verify eligibility, provide privileges, or complete reward redemption.
- 7.3
Digital Platform Providers
LINE, WeChat, or other third-party authentication and communication providers, where relevant to your use of the Services.
- 7.4
Government Authorities and Regulatory Bodies
Authorized public authorities, courts, or law enforcement agencies where disclosure is required or permitted by applicable law.
We will seek to ensure that disclosures are limited to information reasonably necessary for the relevant purpose and subject to appropriate safeguards.
We do not sell your personal information to third parties.
8. Cross-Border Transfers of Personal Information
Certain Services may involve third-party technology providers, cloud infrastructure, or digital platforms operating outside Thailand.
Where personal information is transferred internationally, TAT will take appropriate steps to ensure that such transfers comply with the PDPA and applicable legal requirements.
These steps may include relying on legally recognized transfer mechanisms, appropriate contractual safeguards, or other measures permitted by law.
10. Personalization and Customer Relationship Management
Find Your Thailand may use a customer relationship management (“CRM”) system to support membership services and improve visitor engagement.
This may involve organizing member information according to voluntarily provided interests, travel preferences, activity participation, and Platform interactions.
The information may be used to provide relevant tourism recommendations, develop appropriate campaigns, and evaluate member engagement.
Where personalized promotional communications require consent, they will be provided only in accordance with the applicable legal requirements and your communication preferences.
You may opt out of direct marketing communications through the available unsubscribe or preference-management channels.
11. Personal Information of Minors
Where the processing of personal information involves minors or individuals who require consent from a parent, guardian, or legal representative, TAT will comply with applicable legal requirements.
If we become aware that personal information has been collected without legally required authorization, we will take appropriate steps to address the matter, including deletion where required by law.
12. Retention of Personal Information
We retain personal information only for as long as necessary to fulfill the purposes described in this Notice or to comply with applicable legal obligations.
Retention periods may vary depending on the type of information, the Services provided, operational requirements, and relevant laws.
Once personal information is no longer necessary, we will delete, destroy, or anonymize it in accordance with applicable laws and retention policies.
Certain information may be retained for longer periods where necessary to resolve disputes, establish or defend legal claims, investigate fraud, or comply with legal obligations.
13. Security of Personal Information
TAT is committed to maintaining appropriate technical and organizational security measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
Such measures may include:
- Access controls and user authentication.
- Restrictions on access to personal information.
- Secure data storage and transmission.
- System monitoring and security logging.
- Appropriate confidentiality obligations for authorized personnel and service providers.
- Regular review of relevant security practices.
While we take reasonable precautions to protect personal information, no online system can guarantee absolute security.
14. Your Rights Under the PDPA
Subject to the conditions and limitations prescribed by applicable laws, you may exercise the following rights:
- 14.1
Right of Access
You may request access to your personal information and obtain copies of information held by us.
- 14.2
Right to Rectification
You may request correction of inaccurate, incomplete, or outdated personal information.
- 14.3
Right to Erasure
You may request deletion, destruction, or anonymization of your personal information where permitted by law.
- 14.4
Right to Restrict Processing
You may request restrictions on the processing of your personal information in circumstances specified by law.
- 14.5
Right to Object
You may object to certain processing activities where the law provides such a right.
- 14.6
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal conditions.
- 14.7
Right to Data Portability
You may request to receive or transfer certain personal information in a structured, commonly used, and machine-readable format where applicable.
- 14.8
Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant supervisory authority if you believe that your personal information has been processed in violation of applicable data protection laws.
To exercise your rights, please contact TAT through the contact details provided in this Notice.
We may need to verify your identity before responding to a request.
15. Account Cancellation and Deletion Requests
You may request to cancel your Find Your Thailand membership account at any time through the designated support channels.
Following cancellation, your access to membership benefits and Platform features may be discontinued.
Where applicable, we will delete or anonymize personal information that is no longer necessary, subject to lawful retention requirements.
Account cancellation does not necessarily result in the immediate deletion of all personal information where continued retention is required or permitted by law.
16. Third-Party Websites and Services
The Platform may contain links to external websites, social media platforms, booking services, or participating partners.
These third parties may have their own terms of use and privacy policies.
We encourage you to review the applicable policies before providing personal information to third parties.
This Privacy Notice does not apply to personal information processed independently by such third parties.
17. Changes to This Privacy Notice
TAT may update this Privacy Notice from time to time to reflect changes in our Services, technology, data processing practices, or legal requirements.
The latest version will be published on the Platform together with its effective date.
Where required by law, we will provide appropriate notice or obtain additional consent before implementing material changes.
18. Contact Us
If you have questions about this Privacy Notice, our processing of personal information, or your rights under the PDPA, please contact:
Tourism Authority of Thailand (TAT) 1600 New Phetchaburi Road, Makkasan, Ratchathewi, Bangkok 10400, Thailand. Find Your Thailand Support: [email protected]
For further information about TAT’s personal data protection practices, please refer to the official Privacy Policy: https://www.tourismthailand.org/Information/Privacy-Policy