Version 0.1 (draft) — 7 September 2026
This policy explains what personal data SIAMGO collects, why, who receives it, and your rights. It is written to meet the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"), s. 23. It applies to siamgo.app, the SIAMGO iOS app, and bookings made as a guest without an account.
Data controller:
Privacy contact: [privacy email — confirm mailbox, e.g. privacy@siamgo.app]. [Counsel: whether a DPO must be appointed now (PDPA s. 41) — likely not at current scale; and whether a local PDPA representative under s. 37(5) is required if the operating entity is offshore.]
We only collect what is listed here. Notably, we do not collect passport data, and we do not use analytics trackers or collect device geolocation.
If you book for other people, you must have their permission to give us their details.
We do not sell your data and do not use it for profiling or advertising.
Only these recipients, only for the purposes above:
(phone / messenger handle), pickup address, headcount, and service details (e.g. flight number). They may contact you directly to arrange the service.
delivered to our staff via a private Telegram channel. Telegram's servers are outside Thailand. If you confirm a phone number, the confirmation code is delivered via the Telegram Gateway service to the number you provided.
Google Workspace.
We have no analytics, advertising or tracking third parties.
The recipients above (Telegram, Google, Apple, and some operators' messengers) process data on servers outside Thailand. The PDPA (ss. 28–29) allows such transfers where appropriate safeguards are in place or a statutory ground applies (including necessity for performing your contract). We are putting contractual safeguards in place with these providers. [Counsel: complete SCCs / s. 29 appropriate-safeguard contracts per the PDPC notifications of December 2023 for Telegram-channel staff alerts, Google Workspace and APNs; assess contract- necessity derogation as interim basis.]
complaints, then for the legally required retention period for commercial and tax records [counsel: confirm period — typically 5 years], then deleted or anonymised.
bookings on it.
Apple.
Under the PDPA (ss. 30–36) you can ask us to:
You can download a copy of your data yourself in a machine-readable form (JSON) — on the account page at siamgo.app (“Download my data”) or in the app (Profile → Download my data).
You can also delete your account yourself at any time — on the account page at siamgo.app or in the app (Profile → Delete account). Deletion is refused while you have upcoming or unresolved bookings; cancel or complete them first.
Write to [privacy email] from the email address linked to your booking or account. We respond within 30 days. Deleting data needed for an active booking may mean cancelling the booking; some data must be kept where the law requires (Section 6).
You may also complain to Thailand's Personal Data Protection Committee (PDPC).
We use only strictly necessary cookies / local storage: keeping you signed in (session and authentication tokens) and remembering language and currency. No tracking or advertising cookies — which is why there is no cookie banner.
SIAMGO's services are for users aged 20 and over (see the User Agreement). We do not knowingly collect data of minors as customers; data of minors travelling with you (e.g. headcount, names where required) is provided by you as the booking adult.
Data is transmitted over TLS; passwords are stored hashed; access to booking data is limited to staff who need it. If a breach is likely to pose a risk to your rights, we will notify the PDPC within 72 hours and, for high-risk breaches, notify you directly (PDPA s. 37(4)).
We will post updates here with a new version number and date, and notify you by email or push of material changes at least 15 days in advance where feasible.
[privacy email] · [OPERATOR ENTITY postal address] Published in English, Russian and Thai; the English text is the reference version [counsel: same language-precedence caveat as in the User Agreement].
This document was drafted with AI assistance and is a working draft. It must be reviewed by qualified (Thai and, if applicable, Russian) counsel before publication or reliance.