Loma Travel Co., Ltd. ("Loma", "we") operates loma-travel.com and its subdomains. This policy explains what personal data we collect, why, and your rights over it.
1. What we collect
- Booking data — name, email, phone (WhatsApp), travel dates, group size, dietary and accessibility needs.
- Payment metadata — Stripe/Omise handle card data. We store only the last 4 digits + transaction ID.
- Analytics — anonymised page views, device and country via Google Analytics 4 (if you've accepted cookies) and server-side logs.
- Correspondence — WhatsApp / email threads for service delivery and dispute resolution.
2. Why we collect it
- To fulfil your booking and communicate about it (Art. 6(1)(b) GDPR — contract).
- To comply with Thai tourism law and tax record-keeping (Art. 6(1)(c) GDPR — legal obligation).
- Marketing analytics and email newsletters (Art. 6(1)(a) — consent, revocable any time).
3. Sharing
We share personal data only with (a) service partners actually delivering your trip (yacht crew, driver, villa manager), (b) Stripe/Omise for payment, (c) Thai tax authorities on legal request. Never sold, never shared with data brokers.
4. Retention
Booking records: 7 years (Thai tax law). Marketing consent data: until you unsubscribe. Analytics: 14 months.
5. Your rights
You can request access, correction, deletion, portability, or object to processing at hello@loma-travel.com. Under GDPR you may also lodge a complaint with your national supervisory authority.
6. Cookies
See our Cookie Policy for the full list.
7. Contact
Loma Travel Co., Ltd. · Chalong, Phuket 83130, Thailand · hello@loma-travel.com · WhatsApp +66 99 391 5504