Privacy Policy
Last updated: 19 October 2026.
This policy explains what personal information Koh Samui Elephants collects when you use this website or book a tour through it, why we collect it, who we share it with, and what rights you have over it. It applies to kohsamuielephants.com.
Who we are
This website is operated by Koh Tour Co., Ltd., a tour company registered in Thailand. - Registered company number (DBD): 0845566001800 - Tourism Authority of Thailand license: 42/00462 - Registered address: 9/61 Moo 5, Tambon Bophut, Koh Samui, Surat Thani 84320, Thailand - Email: info@kohsamuielephants.com - Phone: +66 33 019 299
Koh Tour Co., Ltd. is the data controller for the information described below. If you want to exercise any of the rights in this policy, or you have a question about how we handle your information, write to us at info@kohsamuielephants.com.
What we collect
We only collect information you give us, plus basic technical data your browser sends automatically. We do not buy personal data from third parties.
When you book a tour through this site, we collect your booking details directly: your name, contact details, the number of guests, and the tour date and time you choose. Bookings on kohsamuielephants.com are handled through KohTour's booking system. Our card payment processor handles card payments; KohTour does not store your full card details on this site. kohtour.com sells the same tours separately, under its own privacy policy, but a booking made on this site is collected and processed here, by Koh Tour Co., Ltd. When you contact us through the contact form, email, WhatsApp or live chat, we collect your name, your contact details and whatever you write in your message, for example, a booking inquiry or customer support request. When you browse the site, our hosting and analytics providers record standard technical information: IP address, browser and device type, referring page, the pages you view and the time of your visit. See Cookies and analytics below. We do not operate customer accounts on this website, so there is no login, password or stored profile beyond the booking details described above.
How we use your information
We use your information to: - take and fulfill a booking you make on this site, including sending your confirmation and handling a cancellation or change of date - answer inquiries and provide customer support - understand how the website is used so we can improve it, including which comparisons and guides people read before booking - meet our legal and tax obligations in Thailand
Our legal bases are performance of a contract (your booking), compliance with a legal obligation (tax records) and our legitimate interests in running and improving the business. Where we rely on your consent, such as marketing email, you can withdraw it at any time. We will only send you marketing email if you ask us to. Every marketing message includes an unsubscribe link.
Cookies and analytics
Cookies are small files stored by your browser. This website uses them for the purposes below. Strictly necessary cookies keep the site working, including remembering basic preferences like currency display and your booking in progress. Analytics cookies help us understand which pages, comparisons and guides people look at, so we can improve the site. We use Google Analytics and Google Tag Manager for this. The data is aggregated and we do not use it to identify individual visitors. Advertising and referral cookies help us tell which ad or page sent you here. If you arrive by clicking one of our ads, a cookie keeps the ad click identifier for up to 90 days, so we can tell which pages on this site lead to a booking. We also use Crisp to provide live chat. If you open the chat window, Crisp sets a cookie so your conversation continues across pages. You can block or delete cookies through your browser settings.
Who we share your information with
We do not sell your personal information, and we do not share it for other companies' advertising. We share it only with: - The sanctuary operating your tour, so they can run it: your name, contact details, guest count and tour date. We don't share your payment card details with the sanctuary. - Our booking system, to process your booking details, send your confirmation and manage changes or cancellations on our instructions. - Our card payment processor, to process card payments for bookings made on this site. We don't store your full card details ourselves. - Our technology suppliers, who process data on our instructions only: Vercel (website hosting), Supabase (image and content storage), Purelymail (email), Google (analytics and ad measurement), and Crisp (live chat). - Professional advisers and authorities, where we are required to disclose information by Thai law.
Some of these providers are located outside Thailand, so your information may be transferred abroad. Where that happens we rely on the provider's contractual data protection commitments and, for transfers out of the EEA, on standard contractual clauses.
How long we keep it
Booking records are kept for as long as required for accounting and legal purposes under Thai law. Inquiries and customer support requests are deleted within 24 months. Ad click identifiers expire from your browser after 90 days. Analytics data is retained on the shorter retention window offered by our analytics provider.
Your rights
Under the Thai Personal Data Protection Act, and under the GDPR if you are in the European Economic Area or the United Kingdom, you have the right to: - ask what personal data we hold about you and get a copy - have inaccurate or incomplete data corrected - ask us to delete your data, where we have no continuing legal reason to keep it - ask us to restrict how we use your data, or object to a particular use - receive your data in a portable format, or have it sent to another provider - withdraw consent at any time, where our use is based on consent - complain to a supervisory authority. In Thailand this is the Personal Data Protection Committee
Write to info@kohsamuielephants.com to exercise any of these. We will respond within 30 days. We may ask you to confirm your identity first, so we do not disclose your information to someone else.
Children
This website is not directed at children, and we do not knowingly collect personal information directly from anyone under 16. If you believe a child has given us their information directly, for example through the contact form, contact us and we will delete it.
Security
The website is served entirely over HTTPS. Access to any booking or inquiry records we hold is limited to staff who need it. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.
Links to other sites
Our pages link to other websites, such as the elephant parks' own sites, welfare organizations' published guidance, and kohtour.com, where the same tours are also sold directly under kohtour.com's own policies. We are not responsible for their content or their privacy practices, read any other site's own policy separately before using it.
Changes to this policy
We may update this policy as our services or the law change. The date shown at the top of this page is when it was last revised. If we make a significant change affecting how we use your information, we will say so clearly on this page.
Contact us
Questions, requests or complaints about privacy go to info@kohsamuielephants.com, or by post to Koh Tour Co., Ltd. 9/61 Moo 5, Tambon Bophut, Koh Samui, Surat Thani 84320, Thailand. We answer email daily between 07:00 and 22:00 Thailand time (GMT+7), the same hours KohTour publishes on its own site.
