Privacy Policy

Privacy Policy

Last updated: 19 March 2026

Chiang Mai Visa Run (“we”, “us”, “our”) operates the websites chiangmaivisarun.com and chiangmai-borderrun.com. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and what rights you have.

By using our websites or services you agree to the practices described below.

1. Information We Collect

We collect only what we need to deliver our services:

  • Booking information — name, nationality, email address, phone/WhatsApp number, passport details (when required), and travel dates you provide through our booking form or enquiry forms.
  • Communication data — messages you send us via WhatsApp, Messenger, email, or our website contact/enquiry forms.
  • Payment information — we do not store card numbers. Payments are processed through Wise, Revolut, Thai QR, TrueMoney Wallet, bank transfer, or cash at our office.
  • Technical data — IP address, browser type, device information, pages visited, and referring URL. Collected automatically via cookies and analytics tools.

2. How We Use Your Information

We use your data for the following purposes:

  • Processing and managing your bookings and enquiries.
  • Communicating with you about your trip, booking status, and schedule changes.
  • Coordinating with our partner drivers for pick-up and transport.
  • Sending booking confirmations and operational updates via email.
  • Improving our website, services, and customer experience.
  • Complying with legal and tax obligations.

3. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your data under the following legal bases:

  • Contract — processing necessary to fulfil your booking.
  • Legitimate interest — improving our services, website analytics, and fraud prevention.
  • Consent — where you have given explicit consent (e.g. marketing communications).
  • Legal obligation — where required by Thai law or applicable regulations.

4. Cookies & Analytics

Our websites use the following technologies:

  • Google Analytics 4 (GA4, measurement ID: G-LEQBP0XRH6) — collects anonymised usage data to help us understand how visitors use our site. Google may transfer data to servers in the United States. Google Privacy Policy.
  • Essential cookies — required for site functionality, login sessions, and caching (set by WordPress and SiteGround Speed Optimizer).
  • Performance cookies — set by Perfmatters for CSS/JS optimisation.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect site functionality.

5. Who We Share Your Data With

We share your personal information only when necessary to deliver our services:

  • Partner drivers — name, phone number, pick-up location, and trip date for transport coordination.
  • Make.com (Celonis) — our automation platform processes booking data to create calendar events and send confirmations. Make.com Privacy Notice.
  • Google Workspace — booking events are stored in Google Calendar; confirmations may be sent via Gmail. Google Privacy Policy.
  • SiteGround — our hosting provider stores website data on servers in the Netherlands. SiteGround Privacy Policy.
  • Payment processors — Wise and Revolut process international transfers. Thai QR and TrueMoney process local payments. We do not store payment credentials.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including Thailand and the United States (via Google and Make.com). Where required, we rely on appropriate safeguards such as standard contractual clauses or the service provider’s data protection commitments.

7. Data Retention

We retain your personal data for:

  • Booking records — up to 2 years after your trip date, or longer if required for tax/legal purposes.
  • Enquiry form data — up to 12 months after your last communication.
  • Analytics data — as defined by Google Analytics retention settings (currently 14 months).

You can request earlier deletion at any time (see Section 8).

8. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data (“right to be forgotten”).
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interest.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at info@chiangmaivisarun.com. We will respond within 30 days.

9. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

10. Third-Party Links

Our website may contain links to external websites (e.g. WhatsApp, Facebook, Google Maps). We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data: