Who we are and what this policy covers
Cruise Andaman Co., Ltd., trading through Cruise Asia and Phuket Sea School, is responsible for the personal information described in this policy. Our contact address is Phuket Yacht Haven Marina, 141, 2, Mai Khao, Thalang District, Phuket 83110, Thailand.
This policy applies when you use our website, send an enquiry, join a waitlist or newsletter, purchase a gift voucher, request or make a booking, submit participant information, make a payment, attend training or otherwise communicate with us.
Information we collect
We collect only information reasonably needed for the relevant enquiry, transaction, course, charter-related request, safety process or communication.
- Identity and contact information, including name, title, email, telephone or messaging details, address, date of birth and nationality.
- Enquiry and booking information, including interests, preferred dates, group size, selected products, tariffs, extras, promotions, correspondence and how you heard about us.
- Payment and transaction information, including currency, amounts, payment status, balance, invoice information, provider references and any bank-transfer proof you choose to submit.
- Participant and certification information, including passport or identity number where required, qualifications, sailing experience, theory knowledge, certificate details, declarations, typed electronic signature and an optional certificate photograph.
- Safety and welfare information, including emergency contacts, dietary needs, allergies, relevant medical conditions, medication, injuries, mobility or support needs and swimming ability.
- Travel and course logistics, including arrival and departure details, flight information, accommodation, assigned course, vessel, berth and joining arrangements.
- Website and technical information, including IP address, approximate location, browser and device information, pages viewed, referring page, campaign attribution and cookie or similar-technology data.
- Marketing and photography choices, including newsletter consent, unsubscribe status and optional consent relating to identifiable promotional images or video.
Where information comes from
Most information is supplied directly by you. A payer or lead organiser may provide basic booking information for other participants, but each participant must review and submit their own form where required.
Information may also be supplied by a parent, guardian or other authorised representative, or arise from correspondence, payments, course delivery, assessment, certification and records created while providing the requested service.
How and why we use information
- To answer enquiries, recommend suitable products, prepare quotations and take steps requested before a contract is made.
- To administer bookings, payments, balances, refunds, participant forms, joining information, course delivery, customer support and post-course communication.
- To confirm prerequisites, plan safe participation, make reasonable adjustments, respond to emergencies and protect participants, staff, vessels and property.
- To administer examinations, certification, qualification records and replacement or verification requests.
- To maintain accounting, tax, transaction, consent, safety, incident and legal records and to prevent fraud or misuse.
- To operate, secure, measure and improve the website and our services.
- To send newsletters, promotions or use identifiable promotional images only where the relevant optional consent has been provided or another lawful basis clearly applies.
Depending on the activity, processing may be necessary to take steps before or perform a contract, comply with a legal obligation, protect vital interests, pursue a legitimate operational or safety interest, or act on consent. Health and other sensitive information is handled only where necessary and where applicable law permits.
Payments
We record the payment method, amount, currency, status, reference, balance and related accounting information needed to administer your transaction. Full card numbers and card security codes are handled through the payment service used for the transaction and are not stored by Phuket Sea School.
Bank-transfer proofs and related financial documents are treated as private records and are made available only where operationally necessary.
When information is disclosed
We do not sell or rent personal information. We disclose only the information reasonably necessary to provide a requested service, administer a payment or certification, protect health and safety, investigate misuse, comply with law or respond to a lawful authority.
Where another organisation handles information for an agreed purpose, we expect it to protect that information and not use it for unrelated direct marketing.
International transfers
Some services, records or recipients involved in an international training, payment or website operation may be located outside Thailand. Where personal information is transferred internationally, we take reasonable steps appropriate to the information and purpose and apply the protections required by applicable law.
Retention
- Enquiries and correspondence are retained while needed to respond, follow up, provide service and manage legitimate business or legal requirements.
- Booking, payment, invoice, refund and accounting records are retained for the applicable statutory, tax, contractual and dispute periods.
- Training and certification records may be retained where reasonably necessary to confirm achievement, verify or replace certificates and maintain required quality records.
- Medical, emergency, dietary and travel details are retained only for as long as reasonably needed for safe delivery and any applicable incident, insurance or legal requirement, then deleted, restricted or anonymised where appropriate.
- Marketing information is retained until consent is withdrawn, the person unsubscribes or it is no longer needed. A limited suppression record may be retained to respect an opt-out.
When information is no longer required, we take reasonable steps to delete it, anonymise it or restrict further use, subject to legal and operational requirements.
Security and data incidents
We use reasonable administrative, technical and physical measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. Access is limited according to operational need. No electronic transmission or storage method can be guaranteed completely secure.
If a personal-data incident occurs, we will investigate, reduce further risk, keep an appropriate record and notify affected people or the relevant authority where required by law.
Your rights
Subject to the conditions and exceptions in applicable law, you may ask to access or receive a copy of your personal information, correct inaccurate information, request deletion or restriction, object to certain processing, request portability where applicable, or withdraw consent without affecting earlier lawful processing.
We may need to verify identity and clarify the request before acting. Some information must still be retained where required for legal obligations, safety, certification, accounting or the establishment, exercise or defence of legal claims.
You may also raise a concern with Thailand’s Personal Data Protection Committee or another competent authority where applicable.
Children and young people
Some training may be available to participants under 18 subject to the applicable minimum age, safeguarding assessment and parent or guardian involvement. A parent, guardian or authorised adult must provide or approve information where required and must not submit information about a child without authority to do so.
Our website is not designed for unsupervised use by young children. If personal information about a child has been provided without appropriate authority, please contact us so that we can review and, where appropriate, remove it.
Cookies and website information
Essential storage is used for security, forms and saved website preferences. Anonymous site-use and conversion analytics is enabled by default to help improve the website, while advertising measurement remains disabled until you choose to allow it.
You can reject non-essential measurement or separately manage analytics and advertising choices through the privacy controls, and can change those choices later through the Cookie settings link in the website footer. Withdrawing a choice stops future measurement but does not affect processing that occurred lawfully before it was withdrawn.
Campaign attribution may be stored while analytics or advertising measurement is enabled, including while default analytics remains active before a visitor rejects it. We take reasonable steps to remove private access tokens and avoid sending names, contact details, enquiry messages, booking details or participant information in website-measurement events.
Links to other websites
Our website contains links to websites and services that we do not control. Their own privacy notices and terms apply when you use them. We are not responsible for the content or privacy practices of an external website merely because we link to it.
Changes to this policy
We may update this policy to reflect changes in law, our services or how information is handled. The current version and last-updated date will be published on this page. Material changes apply from the stated effective date and do not make earlier processing unlawful.
Contact us
Questions, requests or complaints about personal information can be sent to info@phuketseaschool.com, made by telephone at +66 80 082 5086, or posted to Cruise Andaman Co., Ltd., Phuket Yacht Haven Marina, 141, 2, Mai Khao, Thalang District, Phuket 83110, Thailand.
