Data Subject Access Request

Request access to, correction, or deletion of your personal data

Last Updated: June 2026

Data Request

Last Updated: June 2026

1. Your Data Rights

Under applicable data protection laws — including the EU General Data Protection Regulation (GDPR), the UK GDPR, and Thailand's Personal Data Protection Act (PDPA) — you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Erasure (Deletion) — request that we delete your personal data.
  • Rectification — request correction of inaccurate or incomplete personal data.
  • Portability — request your data in a structured, machine-readable format.
  • Restriction — request that we limit the processing of your data.
  • Objection — object to certain types of processing (e.g., direct marketing).
  • Withdrawal of Consent — withdraw consent you previously gave for data processing.

Use the form below to submit your request. Alternatively, you can email our Data Protection Officer directly.

↑ Back to top

2. Submit Your Request

Identity Verification

To protect your privacy, we may need to verify your identity before processing your request. We may ask you to provide additional information or documentation to confirm that you are the data subject (or an authorised representative).

↑ Back to top

3. Processing Timeframe

We will respond to your request within:

  • 30 days — as required by the GDPR and Thailand's PDPA.

In complex cases, we may extend this period by an additional two months, but we will inform you of the extension and the reason within the initial 30-day period.

↑ Back to top

4. Identity Verification

For your protection, we may request additional verification before fulfilling your request. This may include:

  • Confirming details from your original booking (e.g., booking date, tour name, payment method used).
  • Responding from the email address associated with your booking.
  • In rare cases, providing a copy of government-issued identification (which will be deleted immediately after verification).
↑ Back to top

5. Contact Our Data Protection Officer

If you prefer not to use the form above, you can submit your data request directly by emailing our Data Protection Officer:

DPO Email: privacy@samui.tours

Please include the same information requested in the form above: your full name, email address used for booking, booking reference (if applicable), the type of request, and a description of what you need.

↑ Back to top

6. Supervisory Authorities

If you believe your data rights have not been properly addressed, you have the right to lodge a complaint with the relevant supervisory authority:

Region Authority Website
Thailand Personal Data Protection Committee (PDPC) www.pdpc.or.th
European Union Your national Data Protection Authority (DPA) Find your national DPA
United Kingdom Information Commissioner's Office (ICO) ico.org.uk

We encourage you to contact us first so we can try to resolve your concern directly.

↑ Back to top