Skip to content
Check availability

Privacy notice

Lakerpor Elephant runs this website and the bookings made through it. This notice describes exactly what we hold about you and why. It reflects how the booking system actually works, not a template.

What we collect

Only what a booking needs, and only what you type into the form:

  • Your name — so the guide knows who is arriving
  • Email address — to send your ticket and a reminder the day before
  • WhatsApp number — this is how we confirm every booking
  • Hotel in Chiang Mai — so the driver can collect you
  • Nationality (optional) — helps us brief the guide on language
  • Number of adults, children and infants — seat and price calculation
  • Anything you write in the special requests box, such as allergies

We do not use advertising cookies, analytics or tracking pixels. The only cookie we set is the one that keeps our own staff logged in to the admin area.

Why we are allowed to hold it

To perform the booking you asked for. Under Thailand's PDPA and, for guests in Europe, the GDPR, this is the contractual basis — we cannot pick you up from a hotel we do not know.

Who else sees it

  • Our own staff and guides, to run your day
  • Our email provider (Resend), which delivers your ticket and reminder
  • Our server host, which stores the database

We do not sell your data, share it with advertisers, or send you marketing you did not ask for.

How long we keep it

Booking records are kept while they are needed to run the trip and to answer questions afterwards, such as a payment or insurance query. Ask us to delete your record at any time and we will, unless we are legally required to keep it for accounting.

Your rights

You can ask to see what we hold, correct it, or have it deleted. There is no form to fill in — message us and a person will do it.

Questions, or want your data deleted? Reach us on WhatsApp.

Reviewed by a lawyer? — do not ship

This notice is accurate but not legally reviewed. It was written from the booking system's real behaviour, which is far better than a generic template — but if you take bookings from Europe at any volume, have a Thai lawyer or DPO read it once.

Still needed: the registered company name and address that legally operates the sanctuary, which a privacy notice must state.