Privacy notice

Who we are

TIDE is made by Giles Turnbull Digital Solutions (GTDS), [Registered company name], registration number [Company registration number], of [Registered office address, Thailand]. For the personal data described here, we are the data controller: we decide why and how it is used.

What we collect

When you fill in a form on this site (booking a demo, asking for a quote, or contacting us):

your name, work email and, if you give them, your phone number or LINE ID;
your hotel’s name, your job title, your town or city and your country;
what you tell us about your hotel (rooms, properties, outlets, event spaces, staff numbers, star rating, PMS) and the package you built on the pricing page;
anything you write in the message box;
whether you agreed to hear from us about TIDE.

We also note how you found us: the campaign tags in the link you followed (for example utm_source), the website that sent you, and the first page you landed on. Our hosting provider keeps standard server logs, including your IP address, for security and to keep the site running.

We do not ask for sensitive personal data, and we ask you not to send any.

Why we use it

To reply to you and arrange a demo, call or quote you asked for. This is a step you asked us to take before any contract (PDPA section 24(3)) and in our legitimate interest in answering enquiries (section 24(5)).
To send you occasional news about TIDE, only if you ticked the box. This is based on your consent (section 19), which you can withdraw at any time.
To understand which of our campaigns work, using the campaign tags and referring site. This is in our legitimate interest.
To keep the site secure and stop abuse such as spam, in our legitimate interest.

We do not sell your personal data, and we don’t use it for automated decisions about you.

Cookies and browser storage

This site does not set cookies. It does keep a few small things in your own browser, which never leave your device unless you send a form:

Where you came from (campaign tags, referring site, landing page), kept in session storage until you close the tab, so it can go with any enquiry you send.
The package you built on the pricing page, kept in local storage so a reload doesn’t lose it.
The hotel you chose on the sign-in page, kept in local storage so you go straight to it next time.

You can clear all of these at any time in your browser settings.

Only the service providers who help us run the site and handle enquiries, under contracts that require them to protect it:

our website host, [Vercel Inc.];
the hosting provider for our enquiry database, [DigitalOcean, LLC];
[our email provider, if enquiries are forwarded by email].

We will also share data if the law requires us to.

Data stored outside Thailand

Some of these providers store data outside Thailand, in [countries, e.g. Singapore and the United States]. Where they do, we rely on [the safeguards permitted by PDPA section 28 or 29, e.g. the provider’s contractual commitments].

How long we keep it

We keep enquiry details for [24 months] after we were last in touch, unless you become a customer, in which case the customer agreement applies. If you withdraw consent to news about TIDE, we stop straight away and keep only a note that you opted out. Server logs are kept for [30 days].

Your rights

Under the PDPA you can ask us to:

give you a copy of the personal data we hold about you;
send it to you, or to someone else, in a common format;
correct it if it is wrong or out of date;
delete it, or stop using it for a while;
stop using it for something you object to, including news about TIDE;
withdraw any consent you gave, without affecting what we did before.

Email [privacy@your-domain] and we will reply within 30 days. If you are unhappy with how we handle your data, you can complain to the Office of the Personal Data Protection Committee (PDPC).

Keeping it safe

Enquiries travel over an encrypted connection and are stored in a database that only the GTDS team can reach. We limit who can see them to the people who need to.

Data inside a hotel’s TIDE

This notice covers this website only. When a hotel uses TIDE, the hotel decides how its staff and guest data is used, and its own privacy notice applies. We process that data for the hotel under a separate agreement.

Changes to this notice

If we change this notice, we’ll update the date at the top. If a change matters to how we use data you have already given us, we’ll tell you.

Contact us

Privacy questions: [privacy@your-domain]. Anything else: gilesturnbull@gtdigital.dev or our contact page.