Last updated: 28/10/2026
This notice explains how Eagle Adventure Phuket (“we”) collects and uses your personal data when you visit our website, book an activity or create an account, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). We are the data controller: Eagle Adventure Phuket, Kathu Subdistrict, Kathu District, Phuket 83120, Thailand.
Data we collect
- Booking details: your name, email address, phone number, country and language; the activity, date, time and number of riders; any discount code; and how you heard about us, if you tell us.
- Your Eagle Club account: your name and email address, and if you add them, your phone number, country, language and marketing preference. You sign in with a one-time code sent to your email, or with Google or Apple if you choose. We also keep your visits, points and any Eagle Pass.
- Payments: card payments are handled by Stripe. We never see or store your card number. We keep the amount, the payment status and Stripe's payment references, and for card payments at our counter, the terminal reference.
- Partner bookings: the voucher number and voucher file that a hotel, tour agent or other partner sends us.
- Website use: the link or ad that brought you to us (for example a campaign link or an ad click ID), your device type and browser language, and, if you allow them, analytics and advertising cookies.
- Security records: the IP address and browser of your signed-in sessions. Our system logs hide personal details such as email addresses and phone numbers.
We do not ask for passport or ID numbers and we do not keep copies of identity documents.
Why we use it
- To provide your booking (performance of a contract): to confirm and manage it, send your ticket and updates, check you in, and handle changes and refunds.
- To keep accounting and tax records (legal obligation).
- To run and protect our business (legitimate interests): to prevent fraud and misuse, keep our systems secure, answer your questions and learn which of our pages and ads lead to bookings.
- Analytics and advertising cookies (consent): only if you allow them in our cookie banner.
- Marketing messages (consent): only if you have agreed. You can change this at any time in your account.
Cookies
- Necessary cookies are always on. They remember your cookie choice, keep you signed in and record which link or ad brought you to our website (for 90 days), so we know which campaigns work.
- Analytics cookies (Google Analytics) are used only if you allow them.
- Advertising cookies (Google Ads, Meta and TikTok) are used only if you allow them.
- Before you choose, Google Analytics and Google Ads may receive limited signals without cookies (Google Consent Mode). You can change your choice at any time under “Cookie settings”.
Who we share it with
- Stripe, to process card payments.
- Resend, to send our emails.
- Google and Apple, only if you choose to sign in with them.
- Google, Meta and TikTok, for analytics and advertising, only with your consent.
- RaceFacer, our go-kart timing system, where our staff enter the details needed for your race.
- Our hosting provider, which runs our website and database for us.
- The partner you booked through, if any, to confirm your booking.
- Authorities, when Thai law requires it.
We do not sell your personal data. Some of these providers process data outside Thailand. When they do, we rely on the safeguards the PDPA requires, such as the provider's data protection commitments.
How long we keep it
- Booking and payment records: for as long as Thai accounting and tax law requires, normally at least 5 years.
- Your Eagle Club account: until you delete it. When you delete your account, we remove your profile and sign-in details; booking and payment records stay for the legal period above.
- Everything else: only as long as we need it for the purposes above. Then we delete or anonymise it. Our encrypted backups are replaced on a rolling basis.
Your rights
Under the PDPA you have the right to:
- access your personal data and get a copy of it;
- ask us to correct it;
- ask us to delete or anonymise it, or to limit how we use it;
- object to how we use it;
- receive it in a common electronic format, or ask us to send it to another organisation;
- withdraw your consent at any time. This does not affect what we did before you withdrew it.
You can update your details or delete your account yourself in your Eagle Club account. For any other request, please contact us using the details below. We will reply within 30 days. Some requests may be limited where the law requires us to keep data, such as accounting records. You may also complain to the Office of the Personal Data Protection Committee (PDPC).
How we protect it
We use encrypted connections (HTTPS), give access only to staff who need it, keep a log when staff view customer data, and encrypt our backups.
Changes to this notice
We may update this notice. The latest version is always on this page, with the date it was last updated.
Contact us
For questions about your personal data or to make a request, please contact us using the address, phone numbers and email below.