Privacy Policy

1. Who is responsible for your data

For this Policy, “TDAC Assist,” “we,” “us,” and “our” mean the private TDAC assistance provider identified in your checkout and order confirmation. We are the controller of the personal data we collect to operate this website and provide our service. You can contact our privacy team at support@example.com.

This Policy applies to personal data handled through this website, during an order, and while providing our service. It does not apply to third-party websites or services, including the official TDAC portal and payment provider, each of which has its own privacy notice.

2. Personal data we collect

The data we collect depends on how you use the service. It may include:

• Contact and order data: your name, email address, phone number, order reference, selected service tier, payment status, and communications with us.
• Traveler and document data: each traveler’s full name, nationality, gender, date of birth, passport number, passport expiry date, and other details needed for the TDAC application.
• Travel data: arrival date, entry point, flight information, accommodation, address in Thailand, and recent travel history that you submit.
• Technical and usage data: basic device, browser, IP address, and security or diagnostic information that our website, hosting, and fraud-prevention systems may process.
• Payment data: payment token, transaction status, and limited payment-related information supplied by our payment processor. We do not intentionally store full payment-card numbers or card security codes.

Please provide only information that is necessary for your TDAC assistance. If you provide another traveler’s information, you must have the authority to do so and, where required, tell them about this Policy.

Passport scanner

Our optional passport-scanning tool uses on-device optical character recognition in your browser to read the machine-readable zone of an image you choose. The scan image is not sent to TDAC Assist by that tool. The details filled into the form may be sent to us only if you choose to continue with the application. You must check the results before submitting.

3. How and why we use personal data

We use personal data to:

• set up, confirm, and perform your requested assistance service;
• review and prepare information, submit a TDAC on your behalf where authorized, and send service updates;
• process payment, prevent fraud, protect our systems, and resolve support issues;
• comply with legal obligations, enforce our terms, and establish, exercise, or defend legal claims; and
• improve the reliability, accessibility, and security of our site and service.

Where data-protection law requires a legal basis, we generally process data because it is necessary to perform our contract with you or take steps at your request before entering into a contract; because we have a legitimate interest in operating a secure, reliable service and preventing fraud; because we must comply with legal obligations; or, where appropriate, because you have given consent. You may withdraw consent when consent is the basis for processing, but this does not affect processing already carried out and may affect our ability to provide the service.

We do not sell personal data or use it for advertising profiles. We do not make solely automated decisions that produce legal or similarly significant effects for you.

4. Who we share data with

We share personal data only when necessary to provide the service, operate the business, comply with law, or protect rights and safety. Recipients may include:

• the official TDAC system or relevant authority when we submit your application on your behalf;
• payment processors that process your payment;
• hosting, database, email, customer-support, security, and professional-service providers that process data for us under appropriate instructions or obligations;
• our authorized personnel who need access to assist with your order; and
• public authorities, insurers, advisers, or other parties where required or permitted by law, or in connection with a merger, sale, or restructuring of the business.

We may process or permit service providers to process data in countries other than the country where you live. When a cross-border transfer is subject to a legal safeguard requirement, we will use appropriate safeguards, such as contractual protections or another recognized transfer mechanism, unless an exception permitted by law applies.

5. Retention

We keep application and traveler records for no longer than necessary for the purpose for which they were collected. Our normal operational retention period is 90 days after the relevant arrival date. We may retain limited information for longer where necessary to handle a refund, dispute, fraud or security matter, meet accounting or legal obligations, or enforce our agreements. Payment records are retained in accordance with applicable law and our payment provider’s requirements.

Draft form data can be stored in your browser’s local storage so you can resume an application. It remains on your device until you clear browser data or the site clears it after a completed order. See “Cookies and local storage” below.

6. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data, including access controls and limiting access to personnel and providers with a service need. No internet transmission or storage system is completely secure. Please use a secure connection, protect access to your email account, and contact us promptly if you suspect unauthorized use of your order details.

7. Cookies and local storage

Our site may use essential technical storage, including local storage, to remember a partially completed application and maintain site functionality. We do not use this storage to sell personal data or build advertising profiles. You can clear or block local storage through your browser settings; doing so may prevent you from resuming a saved application.

8. Your privacy rights

Depending on where you live and subject to applicable law, you may have the right to ask us to:

• confirm whether we process your personal data and provide access to it;
• correct inaccurate or incomplete data;
• delete data, or restrict or object to certain processing;
• provide data in a portable format where applicable; and
• withdraw consent where processing relies on consent.

To make a request, email support@example.com from the email address used for your order and include your order reference. We may need to verify your identity and authority before acting, especially when the request concerns another traveler’s data. We will respond within the period required by applicable law. You may also have the right to complain to the relevant data-protection authority in your place of residence or work, including an EEA or UK supervisory authority where applicable.

9. Children and group applications

Our site is not directed to children acting on their own. A parent, guardian, or other authorized adult must provide information for a child traveler. If you believe that data for a child has been submitted without appropriate authority, contact us promptly so we can review the request.

10. Changes to this Policy

We may update this Policy to reflect changes in our service, law, or data practices. The “Last updated” date at the top identifies the latest version. If changes are material, we will provide additional notice where required by law.

11. Contact us

For questions, privacy requests, or concerns, email support@example.com. Please do not send passport images or full payment-card details by ordinary email. Include your order reference where available so we can help safely and quickly.