Privacy Policy

This Privacy Policy explains how Windholm ("we", "our", or "us") collects, uses, and looks after the personal information you share with us when you use our website or enquire about our charter services. We want to be straightforward about what we do with your data, and why.

We take the handling of personal information seriously. This policy applies to visitors to our website at windhol.info and anyone who contacts us to discuss or book a charter.

1. Who We Are

Windholm operates yacht charter services from Rawai Beach, Phuket, Thailand. Our contact details are:

• Address: 94/1 Rawai Beach Road, Mueang Phuket, Phuket 83130, Thailand
• Phone: +66 76 289 574
• Email: [email protected]

We are the data controller for the personal information we hold about you.

2. Data We Collect

We only collect information that is necessary for the purposes described below. This includes:

• Contact information — name, email address, and phone number when you submit an enquiry form.
• Booking details — preferred charter, dates, group size, and any special requests you provide during the booking process.
• Communications — any messages you send us by email, phone, or through our website contact form.
• Technical data — your IP address, browser type, pages visited, and time spent on the site, collected automatically through cookies and analytics tools.
• Payment information — when a booking is confirmed, payment is processed through a third-party provider. We do not store your card details.

We do not collect sensitive personal data such as health information, nationality, or identity documents unless it is strictly required for a specific charter (for example, for certain park permit applications).

3. How We Use Your Data

We use the information we collect to:

• Respond to your enquiries and discuss charter options with you.
• Confirm and manage bookings.
• Send you relevant information about your upcoming charter.
• Follow up after your trip, including a brief feedback request if you have opted in.
• Improve our website and services based on aggregated, anonymised analytics data.
• Comply with legal and regulatory requirements.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance — processing your booking and providing the services you have requested.
• Legitimate interests — responding to enquiries, improving our services, and preventing fraud.
• Consent — sending optional communications such as a post-trip feedback request. You can withdraw consent at any time.
• Legal obligation — where we are required to retain or process data by applicable law.

5. Cookies and Tracking

Our website uses cookies and similar technologies. These help us understand how visitors use the site and allow us to improve the experience over time. A full explanation of the cookies we use and how to manage your preferences is available in our Cookie Policy.

You can adjust your cookie preferences at any time using the consent banner on the site, or through your browser settings.

6. Sharing Your Data

We do not sell your personal data. We share it only where necessary:

• Service providers — including our payment processor, email platform, and analytics providers, all of whom are contractually required to handle your data securely.
• Park and permit authorities — for multi-day charters entering protected marine areas, we may share limited details with relevant Thai authorities to obtain the necessary permits.
• Legal requirements — if required by law or legal process.

Where third-party providers are based outside Thailand, we take reasonable steps to ensure your data is protected under equivalent standards.

7. Data Retention

We retain personal information only for as long as it is needed for the purposes described in this policy, or as required by applicable law. As a general guide:

• Enquiry records are kept for up to 12 months after the enquiry date.
• Booking and guest records are kept for up to 5 years for accounting and legal purposes.
• Marketing communications lists are reviewed and pruned annually.

When data is no longer needed, we delete or anonymise it securely.

8. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — ask us to delete your personal data where we no longer have a lawful reason to hold it.
• Restriction — request that we limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format where applicable.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Security

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include secure server infrastructure, encryption in transit, and restricted internal access to personal data.

No method of transmission over the internet is entirely free of risk, but we take our responsibility to protect your data seriously and review our practices regularly.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted information to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. For significant changes, we will provide a more prominent notice where appropriate.

12. Contact Us

If you have questions, concerns, or requests regarding your personal data, please contact us:

• Email: [email protected]
• Phone: +66 76 289 574
• Post: Windholm, 94/1 Rawai Beach Road, Mueang Phuket, Phuket 83130, Thailand

We aim to resolve any concerns informally and promptly. If you feel your concern has not been addressed, you have the right to raise it with the relevant data protection authority in your jurisdiction.