The legal stuff - Privacy policy
Just like most companies, we have a range of information we're required to provide, or support our customers with, such as privacy policies, cookie policies and terms and conditions.
We know nobody likes these, but they're required, as much to protect our guests as ourselves.
Table Of Contents
Who we are
Splendid Voyage trading as Splendid Health Management (“we”, “us”) provides weight-management and wellbeing services that include retreats in Thailand.
Our primary website is splendidhealththailand.com. Our legal details:
- Registered name: Splendid Health Management International
- Registered office: 88 Moo6 Maehea Muang Chiang Mai, Chiang Mai, Thailand 50100
- Company number: +66958213437
- Data protection contact: will@splendidvoyage.com
This notice explains what we collect, why we collect it, how long we keep it, who we share it with, and your rights. It follows the UK GDPR’s transparency requirements.
The personal data we collect
We collect:
- Identity and contact details, such as name, email, phone and country.
- Booking and travel preferences, such as dates, room type and activity choices.
- Payment details handled securely by our payment provider. We keep only limited records for accounts, not full card data.
- Health and lifestyle information that you choose to share so we can tailor activities and meals. This is special category data and needs extra protection.
- Usage data, including cookie and analytics data. See our Cookie Policy.
Why we use your data and our lawful bases
We use your data to:
- Provide quotes and bookings, arrange accommodation and activities, and manage your stay. Lawful basis: contract.
- Tailor the programme to your needs, including dietary and activity planning. Lawful basis: legitimate interests, plus an Article 9 condition for health data, usually explicit consent that we will ask for clearly and separately.
- Send service messages about your booking. Lawful basis: contract.
- Send optional updates and offers. Lawful basis: consent. You can opt out at any time.
- Keep proper records, handle complaints and meet legal duties. Lawful basis: legal obligation and legitimate interests.
Special category data
If you share health or dietary information, we will only use it with an appropriate Article 9 condition, most often explicit consent. We will keep it limited, protected, and for the shortest time necessary. We document our condition and, where needed, keep an appropriate policy document.
International transfers
Some suppliers helping deliver your retreat are in Thailand. When we transfer personal data outside the UK we use appropriate safeguards in line with UK GDPR, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, and we can carry out a transfer risk assessment where required.
Thai partners are also subject to Thailand’s PDPA. New PDPA rules on cross-border transfers came into force in March 2024 and we take them into account in our contracts with Thai service providers.
Cookies and analytics
We use necessary cookies to run the site and, with your consent, optional cookies for analytics and improvements. You can change your cookie settings at any time via our Cookie Preferences. See our Cookie Policy for details. UK rules require consent for non-essential cookies.
How long we keep your data
We keep data only as long as needed. Typical periods are:
- Booking records and invoices: 6 years for tax and accounting.
- Health and dietary notes: kept only for the current booking and a short period after, unless you ask us to keep them for your next visit.
- Marketing contacts: until you opt out.
Who we share it with
- Trusted processors who provide hosting, payments, logistics, transport, accommodation and activities.
- Professional advisers and legal or regulatory bodies when required by law.
- We require processors to protect your data and not use it for their own purposes.
Your rights
You have rights to access, correct, erase, restrict or object to processing, and to data portability. You can withdraw consent at any time. You also have the right to complain to the Information Commissioner’s Office (ICO). See ico.org.uk.
EU residents
If you are in the EEA and we target services to you, EU GDPR may apply. In that case, we may need to appoint an EU representative under Article 27. If appointed, we will add their contact details here.
Security
We use technical and organisational measures to protect your data, limit access, and train staff.
Contact us
Questions or requests: support@splendidhealththailand.com
