Privacy policy

Effective 1 January 2025 · Last updated 15 July 2026

JollyTravel (“we”) takes your privacy seriously. This policy explains how we collect, use and protect your personal data when you use our services, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

01What we collect

We collect what is needed to arrange your travel:

Identity details such as name, national ID and date of birth
Contact details such as email, phone number and address
Payment details — card data is encrypted and never stored in full
Usage data such as booking history, device type and IP address

02How we use it

We use your data for these lawful purposes:

Making, confirming and managing your bookings
Contacting you about a booking or a change to it
Improving our service and offering what fits you, where you have consented
Meeting legal obligations and preventing fraud

03Sharing with third parties

We do not sell your personal data. We share only what is necessary with the partners fulfilling your booking — carriers, hotels and payment processors.

Every partner is bound by confidentiality and data-protection terms.

04Cookies and tracking

We use cookies to remember your settings, understand usage and improve the site. You can manage or block them in your browser, though some functions may stop working.

05Your rights

Under the PDPA you have the right to:

Access your data and request a copy
Have inaccurate data corrected
Have your data erased or its use suspended
Withdraw consent and object to processing

06How we protect it

We apply industry-standard measures — 256-bit SSL encryption, access controls and regular system review — to keep your data from unauthorised access.

07How long we keep it

We keep your data only as long as the stated purpose or the law requires. After that it is deleted or safely anonymised.

Questions about this policy?

To exercise your rights or ask a question, contact our data protection officer through any of the channels below.

Contact our team