Privacy Policy
Privacy Policy
Last updated: 3 July 2026. This Privacy Policy explains how we collect, use and protect personal data when you visit or use PrivateCharterFinder.com.
Last updated: 3 July 2026. This Privacy Policy explains how we collect, use and protect personal data when you visit or use PrivateCharterFinder.com.
Last updated: 3 July 2026
Last updated: 3 July 2026
This Privacy Policy explains how we collect, use and protect personal data when you visit or use PrivateCharterFinder.com.
This Privacy Policy explains how we collect, use and protect personal data when you visit or use PrivateCharterFinder.com.
1. Controller
1. Controller
The controller responsible for the processing of personal data on this website is: Phi Phi Tours Germany, Baierbrunner Str. 89, 81379 Munich, Germany. Email: pcf@phiphitours.info
The controller responsible for the processing of personal data on this website is: Phi Phi Tours Germany, Baierbrunner Str. 89, 81379 Munich, Germany. Email: pcf@phiphitours.info
2. What this Website Does
2. What this Website Does
PrivateCharterFinder.com is a lead generation and request matching website for private boat charter and private tour requests in Thailand. The website allows you to submit information about your travel plans, preferences and contact details. The purpose is to help you receive suitable information, offers or follow-up communication for private boat charter services offered in connection with phiphitours.info and the respective licensed Thai operating partners. PrivateCharterFinder.com itself does not operate tours, provide tour guiding services or perform on-ground tour execution in Thailand.
PrivateCharterFinder.com is a lead generation and request matching website for private boat charter and private tour requests in Thailand. The website allows you to submit information about your travel plans, preferences and contact details. The purpose is to help you receive suitable information, offers or follow-up communication for private boat charter services offered in connection with phiphitours.info and the respective licensed Thai operating partners. PrivateCharterFinder.com itself does not operate tours, provide tour guiding services or perform on-ground tour execution in Thailand.
3. Personal Data We Process
3. Personal Data We Process
3.1 Technical Data
3.1 Technical Data
When you visit the website, certain technical data may be processed automatically, including IP address, date and time of access, browser type and version, operating system, device type, referrer URL, pages visited, approximate location derived from technical data, log files and security-related information. This data is processed to provide the website securely, prevent abuse, troubleshoot errors and improve website performance.
When you visit the website, certain technical data may be processed automatically, including IP address, date and time of access, browser type and version, operating system, device type, referrer URL, pages visited, approximate location derived from technical data, log files and security-related information. This data is processed to provide the website securely, prevent abuse, troubleshoot errors and improve website performance.
3.2 Request and Lead Data
3.2 Request and Lead Data
When you complete the finder, submit a request or contact us, we may process information such as name, email address, phone number or WhatsApp number, preferred contact method, travel date, departure location, destination or route preferences, group size, budget range, preferred boat type or charter category, trip preferences and special requests, language preference, message content, request source, campaign data, UTM parameters or referral information, time and status of the request.
When you complete the finder, submit a request or contact us, we may process information such as name, email address, phone number or WhatsApp number, preferred contact method, travel date, departure location, destination or route preferences, group size, budget range, preferred boat type or charter category, trip preferences and special requests, language preference, message content, request source, campaign data, UTM parameters or referral information, time and status of the request.
3.3 Communication Data
3.3 Communication Data
If you contact us via WhatsApp, email, forms or other communication channels, we may process your contact details, communication content, message history, attachments or documents you send, and internal notes required to process your request.
If you contact us via WhatsApp, email, forms or other communication channels, we may process your contact details, communication content, message history, attachments or documents you send, and internal notes required to process your request.
3.4 Booking-Related Data
3.4 Booking-Related Data
If your request leads to a booking via Phi Phi Tours or a local Thai operator, additional booking-related data may be processed by the relevant booking party and/or operator. This may include booking details, participant information, payment status, invoice information, customer support messages, and information required for tour organization, transfers, safety, identity checks or legal compliance. The applicable booking terms and privacy information of the respective booking or operating party may apply in addition to this Privacy Policy.
If your request leads to a booking via Phi Phi Tours or a local Thai operator, additional booking-related data may be processed by the relevant booking party and/or operator. This may include booking details, participant information, payment status, invoice information, customer support messages, and information required for tour organization, transfers, safety, identity checks or legal compliance. The applicable booking terms and privacy information of the respective booking or operating party may apply in addition to this Privacy Policy.
4. Purposes of Processing
4. Purposes of Processing
We process personal data to provide and operate this website, allow you to use the Private Charter Finder, receive, evaluate and process your charter request, forward your request to Phi Phi Tours Germany, phiphitours.info and/or the relevant licensed Thai operating partner where necessary, contact you regarding your request, provide suitable information, availability checks, offers or booking options, improve lead quality, website performance and user experience, measure marketing performance and conversion events, prevent fraud, spam, abuse and misuse, comply with legal, tax and accounting obligations, and establish, exercise or defend legal claims.
We process personal data to provide and operate this website, allow you to use the Private Charter Finder, receive, evaluate and process your charter request, forward your request to Phi Phi Tours Germany, phiphitours.info and/or the relevant licensed Thai operating partner where necessary, contact you regarding your request, provide suitable information, availability checks, offers or booking options, improve lead quality, website performance and user experience, measure marketing performance and conversion events, prevent fraud, spam, abuse and misuse, comply with legal, tax and accounting obligations, and establish, exercise or defend legal claims.
5. Legal Bases for Processing
5. Legal Bases for Processing
Where the GDPR applies, we process your personal data on the following legal bases.
Where the GDPR applies, we process your personal data on the following legal bases.
5.1 Pre-contractual or Contractual Measures — Art. 6(1)(b) GDPR
5.1 Pre-contractual or Contractual Measures — Art. 6(1)(b) GDPR
We process your request and contact details where necessary to respond to your inquiry, prepare offers, facilitate booking communication or take steps prior to entering into a contract.
We process your request and contact details where necessary to respond to your inquiry, prepare offers, facilitate booking communication or take steps prior to entering into a contract.
5.2 Legitimate Interests — Art. 6(1)(f) GDPR
5.2 Legitimate Interests — Art. 6(1)(f) GDPR
We may process data based on our legitimate interests in operating a secure and functional website, responding to inquiries, improving our services, preventing abuse and fraud, measuring basic business performance, documenting communication and requests, and asserting or defending legal claims.
We may process data based on our legitimate interests in operating a secure and functional website, responding to inquiries, improving our services, preventing abuse and fraud, measuring basic business performance, documenting communication and requests, and asserting or defending legal claims.
5.3 Consent — Art. 6(1)(a) GDPR
5.3 Consent — Art. 6(1)(a) GDPR
Where required, we rely on your consent for non-essential cookies, analytics tracking, advertising tracking, remarketing, certain third-party integrations and optional marketing communication. You may withdraw your consent at any time with effect for the future.
Where required, we rely on your consent for non-essential cookies, analytics tracking, advertising tracking, remarketing, certain third-party integrations and optional marketing communication. You may withdraw your consent at any time with effect for the future.
5.4 Legal Obligations — Art. 6(1)(c) GDPR
5.4 Legal Obligations — Art. 6(1)(c) GDPR
We process certain data where necessary to comply with legal, tax, accounting, commercial or regulatory obligations.
We process certain data where necessary to comply with legal, tax, accounting, commercial or regulatory obligations.
6. Sharing of Personal Data
6. Sharing of Personal Data
We may share personal data with the following categories of recipients where necessary.
We may share personal data with the following categories of recipients where necessary.
6.1 Phi Phi Tours and Local Thai Operating Partners
6.1 Phi Phi Tours and Local Thai Operating Partners
Your request may be shared with Phi Phi Tours Germany, phiphitours.info and/or the relevant licensed Thai operator in order to process your inquiry, check availability, prepare suitable offers, organize communication or handle booking-related matters. Tours and on-ground services in Thailand are handled by licensed Thai operators and/or local service providers. In particular, requests may be shared with: PHI PHI TOUR TH, Thailand, TAT Licence: 14/03518.
Your request may be shared with Phi Phi Tours Germany, phiphitours.info and/or the relevant licensed Thai operator in order to process your inquiry, check availability, prepare suitable offers, organize communication or handle booking-related matters. Tours and on-ground services in Thailand are handled by licensed Thai operators and/or local service providers. In particular, requests may be shared with: PHI PHI TOUR TH, Thailand, TAT Licence: 14/03518.
6.2 Freelancers and Support Staff
6.2 Freelancers and Support Staff
We may use freelancers, contractors or support staff to help process inquiries, customer communication, marketing, technical support or administrative tasks. Such persons are only given access to personal data where necessary.
We may use freelancers, contractors or support staff to help process inquiries, customer communication, marketing, technical support or administrative tasks. Such persons are only given access to personal data where necessary.
6.3 Technical Service Providers
6.3 Technical Service Providers
We may use third-party providers for website hosting, website building, database management, forms, automation, email, analytics, advertising, customer communication and security. Depending on the technical setup, these providers may include services such as Framer, Bubble, Google Analytics, Google Ads, Meta advertising tools, WhatsApp / Meta services, WATI or similar WhatsApp communication tools, email providers, automation tools, hosting, security and infrastructure providers. The exact providers may change over time depending on our technical setup.
We may use third-party providers for website hosting, website building, database management, forms, automation, email, analytics, advertising, customer communication and security. Depending on the technical setup, these providers may include services such as Framer, Bubble, Google Analytics, Google Ads, Meta advertising tools, WhatsApp / Meta services, WATI or similar WhatsApp communication tools, email providers, automation tools, hosting, security and infrastructure providers. The exact providers may change over time depending on our technical setup.
6.4 Authorities, Advisors and Legal Parties
6.4 Authorities, Advisors and Legal Parties
We may disclose personal data to tax advisors, legal advisors, authorities, courts, payment providers or other parties where required by law or necessary to protect our rights.
We may disclose personal data to tax advisors, legal advisors, authorities, courts, payment providers or other parties where required by law or necessary to protect our rights.
7. International Data Transfers
7. International Data Transfers
Because the requested services relate to private tours and charters in Thailand, your personal data may be transferred to Thailand where necessary to process your request or booking. Some technical service providers may also process data outside the European Economic Area, including in the United States or other countries. Where required, we use appropriate safeguards such as contractual arrangements, standard contractual clauses or other legally recognized transfer mechanisms. In cases where data is transferred because you requested services in Thailand, the transfer may also be necessary for pre-contractual or contractual measures connected to your request.
Because the requested services relate to private tours and charters in Thailand, your personal data may be transferred to Thailand where necessary to process your request or booking. Some technical service providers may also process data outside the European Economic Area, including in the United States or other countries. Where required, we use appropriate safeguards such as contractual arrangements, standard contractual clauses or other legally recognized transfer mechanisms. In cases where data is transferred because you requested services in Thailand, the transfer may also be necessary for pre-contractual or contractual measures connected to your request.
8. Cookies, Tracking and Analytics
8. Cookies, Tracking and Analytics
This website may use cookies and similar technologies.
This website may use cookies and similar technologies.
8.1 Necessary Cookies
8.1 Necessary Cookies
Necessary cookies are used to provide core website functionality, security, consent management, form functionality and technical operation. These cookies do not require separate consent where they are strictly necessary.
Necessary cookies are used to provide core website functionality, security, consent management, form functionality and technical operation. These cookies do not require separate consent where they are strictly necessary.
8.2 Analytics and Marketing Cookies
8.2 Analytics and Marketing Cookies
We may use analytics and advertising technologies to understand how visitors use the website, measure conversion events, improve advertising performance and optimize our marketing. This may include tools such as Google Analytics, Google Ads conversion tracking, Meta advertising tools or similar services. Where legally required, such technologies are only activated after you have given your consent through the cookie banner or consent management tool.
We may use analytics and advertising technologies to understand how visitors use the website, measure conversion events, improve advertising performance and optimize our marketing. This may include tools such as Google Analytics, Google Ads conversion tracking, Meta advertising tools or similar services. Where legally required, such technologies are only activated after you have given your consent through the cookie banner or consent management tool.
8.3 UTM Parameters and Campaign Tracking
8.3 UTM Parameters and Campaign Tracking
If you arrive on this website through an advertisement, search engine, social media post, affiliate link or other campaign, we may store campaign parameters such as UTM source, medium, campaign, content or term. This helps us understand which marketing activities generated your request.
If you arrive on this website through an advertisement, search engine, social media post, affiliate link or other campaign, we may store campaign parameters such as UTM source, medium, campaign, content or term. This helps us understand which marketing activities generated your request.
8.4 Managing Consent
8.4 Managing Consent
You can accept, reject or adjust non-essential cookies through the cookie banner or consent settings. You can also delete cookies in your browser settings at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can accept, reject or adjust non-essential cookies through the cookie banner or consent settings. You can also delete cookies in your browser settings at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
9. WhatsApp and External Communication Channels
9. WhatsApp and External Communication Channels
If you contact us or continue your request via WhatsApp, your communication may be processed by WhatsApp and its affiliated companies according to their own terms and privacy policies. Please note that WhatsApp may process metadata, phone numbers, device information and message-related information independently. We have no full control over WhatsApp’s own data processing. If you prefer not to use WhatsApp, you may contact us by email.
If you contact us or continue your request via WhatsApp, your communication may be processed by WhatsApp and its affiliated companies according to their own terms and privacy policies. Please note that WhatsApp may process metadata, phone numbers, device information and message-related information independently. We have no full control over WhatsApp’s own data processing. If you prefer not to use WhatsApp, you may contact us by email.
10. Data Retention
10. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Typical retention periods may be: technical server logs usually up to 30 days unless longer storage is required for security reasons; unsuccessful inquiries and lead data up to 24 months; customer communication up to 3 years after the last contact unless longer retention is required; booking, invoice, accounting and tax-related data for the statutory retention periods applicable under German law; and consent records for as long as necessary to document consent and comply with legal requirements. We may retain data longer where required to establish, exercise or defend legal claims.
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Typical retention periods may be: technical server logs usually up to 30 days unless longer storage is required for security reasons; unsuccessful inquiries and lead data up to 24 months; customer communication up to 3 years after the last contact unless longer retention is required; booking, invoice, accounting and tax-related data for the statutory retention periods applicable under German law; and consent records for as long as necessary to document consent and comply with legal requirements. We may retain data longer where required to establish, exercise or defend legal claims.
11. Your Rights
11. Your Rights
Where the GDPR applies, you have the right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object to processing based on legitimate interests, right to withdraw consent at any time, and right to lodge a complaint with a competent data protection authority. To exercise your rights, please contact us at: pcf@phiphitours.info. If we are legally required or permitted to retain certain data, we may not be able to delete it immediately.
Where the GDPR applies, you have the right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object to processing based on legitimate interests, right to withdraw consent at any time, and right to lodge a complaint with a competent data protection authority. To exercise your rights, please contact us at: pcf@phiphitours.info. If we are legally required or permitted to retain certain data, we may not be able to delete it immediately.
12. No Obligation to Provide Data
12. No Obligation to Provide Data
You are not legally required to provide personal data through this website. However, without certain information, we may not be able to process your request, check suitable charter options or contact you.
You are not legally required to provide personal data through this website. However, without certain information, we may not be able to process your request, check suitable charter options or contact you.
13. Security
13. Security
We use reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction. However, no online transmission or storage system can be guaranteed to be completely secure.
We use reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction. However, no online transmission or storage system can be guaranteed to be completely secure.
14. Children
14. Children
This website is not directed at children. We do not knowingly collect personal data from children. Requests should only be submitted by adults or with the involvement of a parent or legal guardian.
This website is not directed at children. We do not knowingly collect personal data from children. Requests should only be submitted by adults or with the involvement of a parent or legal guardian.
15. Changes to this Privacy Policy
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or technical setup. The version published on this website is the current version.
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or technical setup. The version published on this website is the current version.