Last updated 10 August 2026
1. Who we are
Boat and Beyond operates boat tours in Krabi and Phuket, Thailand, and is the data controller for the personal information described here. Our office is at 216 AoNang 11/1, Amphoe Muang Krabi, Krabi 81180, Thailand. You can reach us at support@boatandbeyond.com or +66 92 246 6993.
2. Information we collect
When you book a trip we ask for your full name as it appears on your passport, your email address, your contact or WhatsApp number, your country, and your hotel or pick up location. We also record the number of adults, children and infants travelling, your chosen food sets, and any food allergy you tell us about. If you used a referral or promo code, we store that code.
3. Food allergy information
Food allergy details are health related information. We collect them only because you choose to give them to us, we use them only to prepare your food safely on board, and we share them only with the crew and caterers handling your trip. You can book without providing them.
4. How we use your information
We use it to confirm and operate your booking, to send your booking confirmation and any updates about your trip by email, to take payment, to answer your questions, and to keep the accounting records Thai law requires us to keep.
5. Payment information
We do not see or store your card details. Card data is sent directly from your browser to our payment provider which returns a token to us. From the payment we retain only a charge reference, the amount, the payment date, and the cardholder name.
6. Cookies and analytics
We set one cookie of our own, affCode, which records the referral link you arrived through so we can credit our partners. It lasts 30 days and cannot be read by scripts. We measure how the site is used with Umami, which we host ourselves and which does not use cookies or collect personal information, and with Google Tag Manager, which loads our analytics tags. We do not use advertising, remarketing or ad targeting cookies. Analytics events record pages, routes and booking amounts, never your name, email or phone number.
7. Who we share your information with
We share what is needed, and nothing more, with: our payment providers Omise and PaySolution, to take payment; our email provider, to deliver your confirmation and the boat crew, drivers and caterers operating your trip. We do not sell your personal information, and we do not share it for advertising.
8. Where your information is stored
Our booking records are held on servers operated by our cloud database provider, which may be located outside Thailand. Where that happens we rely on the provider's contractual safeguards to protect your information to the standard Thai law requires.
9. How long we keep it
We keep booking records for 5 years after your trip, which is the period Thai accounting and tax rules require. After that we delete them or remove anything that identifies you.
10. Your rights
Under the Thai Personal Data Protection Act you can ask us to give you a copy of the information we hold about you, correct it if it is wrong, delete it where we are not required to keep it, restrict or object to how we use it, or withdraw consent you have given, for example for food allergy details. Email support@boatandbeyond.com and we will respond within 30 days. We may need to confirm your identity first, and we may ask for your booking reference.
11. Children
Our tours are booked by adults. We collect the number and ages of children travelling only so we can price the trip and provide the right safety equipment. We do not knowingly collect information directly from children.
12. Changes to this policy
If we change this policy we will update the date at the top of this page. Significant changes affecting how we use your information will be notified by email to customers with upcoming bookings.
13. Contact us
Questions or complaints: support@boatandbeyond.com, or write to Boat and Beyond, 216 AoNang 11/1, Amphoe Muang Krabi, Krabi 81180, Thailand. If you are not satisfied with our response you may complain to the Personal Data Protection Committee in Thailand.