Aerial view of Mae Haad bay and the green hills of Koh Tao

Privacy Policy

Blue Chitta Co., Ltd. is the data controller for the personal data described here. This policy explains what we collect, why, and what rights you have under the Thai Personal Data Protection Act (PDPA).

Ask Blue Chitta Booking & payment policy

In short

Blue Chitta Co., Ltd. collects the contact, booking, health-form and payment details needed to run your program safely and meet Thai legal obligations, shares them only with Stripe, certifying agencies, our service providers, platforms you booked through and Thai authorities where required, and never sells them. Under the PDPA you can access, correct or delete your data by emailing bluechittakohtao@gmail.com.

What we collect

Identity and contact details: name, email address, phone or WhatsApp number, nationality, date of birth, and passport or ID details where required for course certification, boat manifests or legal record-keeping. Booking details: the program you booked, dates, dietary requirements, accommodation and emergency contact. Health information you provide on our medical and liability forms, collected with your explicit consent for your safety in the water and on the mat. Payment information: your payment is processed by Stripe; we receive confirmation of payment and a partial card reference only. Website data: basic technical and usage data collected through cookies and analytics tools. Photos and video taken during your stay, where you have signed our image consent form.

Why we use it

To take and manage your booking, deliver your program safely, issue certifications, comply with Thai tax, immigration and tour-operator record-keeping obligations, process payments, and — where you have agreed — send you news and offers.

Who we share it with

Stripe, for payment processing. Freediving and yoga certifying agencies, where you are taking a certified course and a certification record must be issued. Our booking, email and cloud storage providers, who process data on our behalf. Thai authorities, where the law requires it. Third-party booking platforms, where you booked through one. We do not sell your personal data.

How long we keep it

Booking and financial records are kept for the period Thai law requires. Certification records are kept for as long as the certifying agency requires. Marketing contact details are kept until you unsubscribe.

Your rights

Under the PDPA you may request access to your data, correction of inaccurate data, deletion, restriction of processing, a copy of your data in portable form, and withdrawal of consent at any time. Withdrawing consent for health data means we can no longer allow you to take part in water or physical activity. Write to us at bluechittakohtao@gmail.com and we will respond within 30 days.

Marketing and cookies

We only send marketing emails to people who have opted in, and every email carries an unsubscribe link. Our website uses cookies necessary for it to function, and analytics cookies to understand how the site is used. You can control cookies through your browser settings.

Questions, answered clearly.

The useful details first. Ask the team when your plans need a specific answer.

How do I ask for my data to be deleted?

Email bluechittakohtao@gmail.com. We respond to every data request within 30 days.

Tell us where you are. We'll help you find the next breath.

No course catalogue to decode. Share your level, dates and what you want from Koh Tao.

Ask Blue Chitta