Privacy Policy
Last Updated: 12 May 2025 | Nimman Baan, Chiang Mai, Thailand
Nimman Baan ("we", "us", "our") operates from 33 Nimmanahaeminda Road, Su Thep, Mueang, Chiang Mai 50200, Thailand. This policy describes how we collect and handle personal information when you contact us, make a booking enquiry or use this website. We keep this information for the purposes of managing your stay, communicating with you before and after your visit, and maintaining records required for our business operations.
Thailand's Personal Data Protection Act B.E. 2562 (PDPA) governs how we handle personal data. We apply the same care when dealing with guests from jurisdictions governed by GDPR, PDPA (UK), CCPA or equivalent frameworks.
1. Information We Collect
We collect information you provide directly through our contact form or by phone or email:
- Full name
- Email address
- Phone number (optional)
- Flight details and travel dates you choose to share
- Number of guests and any special requirements you mention
We also collect non-personal data automatically when you visit this website:
- Browser type, device type and operating system
- Pages visited and time on site
- Referring URL
- Approximate geographic location (country level, via IP)
Legal Basis for Processing
We process personal data on the basis of: (a) your consent when you submit an enquiry form; (b) performance of a contract when we are preparing your stay; (c) our legitimate interests in running and improving our business; and (d) legal obligations where applicable.
Retention Periods
Booking records are retained for three years following your stay for accounting and dispute purposes. Enquiries that did not result in a booking are deleted after 12 months. Website analytics data is held in aggregate form and does not identify individuals.
2. How We Use Your Information
Information collected is used for:
- Responding to your enquiry and confirming or preparing your stay
- Coordinating your shuttle and departure arrangements
- Sending booking confirmation and relevant pre-arrival information
- Following up after your stay if you have raised a concern
- Improving the website and understanding how guests find us
We do not send marketing emails unless you have explicitly requested information about future stays. We do not sell or rent your data to third parties.
Third-Party Services
We may use Google Analytics (aggregate, anonymised data) and standard email hosting to manage correspondence. Payment is handled directly and not processed through this website. Shuttle partners receive only the information needed to identify your group at the terminal (name and approximate arrival time).
3. How We Protect Your Data
- This website is served over HTTPS with a current SSL certificate
- Access to booking records is limited to the team members who need them to manage your stay
- Physical records are kept in a locked office and are not accessible to guests or unrelated third parties
- We review our data handling practices annually
- In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authority within the timeframe required by the PDPA
4. Cookies
We use essential cookies to keep the website functioning and optional cookies for analytics purposes. You can manage your preferences at any time via our Cookie Policy page. Declining optional cookies will not affect your ability to use the site or contact us.
5. Your Rights
Under the Thailand PDPA and equivalent frameworks, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data where we no longer have a lawful basis to retain it
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, you may withdraw at any time
To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. If you are unsatisfied, you may lodge a complaint with the Personal Data Protection Committee of Thailand or your local data protection authority.
6. External Links
This site may contain links to external services such as Google Maps. When you follow a link to another site, that site's own privacy policy applies. We are not responsible for the practices of third-party websites.
7. Children
This website is intended for use by adults aged 18 and over. We do not knowingly collect personal data from children under 18 without verifiable parental consent. Family bookings involving minors are made by the responsible adult in the group.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be noted at the top of the page with a revised date. Continued use of the website after a change is posted constitutes acceptance of the updated terms.
9. Contact
For any question about this policy or to exercise your data rights:
Nimman Baan
33 Nimmanahaeminda Road, Su Thep, Mueang, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 217 846