Last updated: August 2026
Koh Tao Experiences (“Koh Tao Experiences”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how Koh Tao Experiences collects, uses, stores, shares, and protects personal data when you visit our website, contact us, make a booking, participate in our diving courses or activities, or otherwise interact with us.
This Privacy Policy is intended to comply with applicable Thai data protection laws, including the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), as applicable.
By using our services or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.
Koh Tao Experiences
Koh Tao, Koh Phangan District, Surat Thani, Thailand
Website: https://www.kohtao-experiences.com/
Telephone: +66 92 992 9551
For questions concerning your personal data or this Privacy Policy, you may contact us using the details above.
Depending on how you interact with Koh Tao Experiences, we may collect different categories of personal data.
This may include:
When you make a booking, we may collect information such as:
We may collect information relating to payments, including:
Where payment is processed through a third-party payment provider, we may not receive or store your complete card or banking details.
Payment providers may process your information in accordance with their own privacy policies.
For diving courses and certified-diver activities, we may collect information relating to:
Scuba diving requires customers to meet applicable medical and physical requirements.
Where necessary, we may collect information concerning your health or medical fitness for diving, including information provided through:
Health information is considered sensitive personal data under applicable data protection laws.
We will only collect and process such information where permitted by applicable law and where necessary for legitimate safety, medical, certification, or legal purposes, including where appropriate on the basis of your explicit consent.
We will take appropriate measures to protect such information.
We may collect personal data directly from you when you:
We may also receive information from third parties, such as:
We may use personal data for the following purposes:
To:
To:
Where applicable, information may be used to:
To:
To communicate with you regarding:
Where permitted by applicable law and, where required, with your consent, we may use your contact information to send:
You may unsubscribe from marketing communications at any time.
Depending on the circumstances, Koh Tao Experiences may process personal data on one or more of the following grounds:
For sensitive personal data, including health information, we will rely on an appropriate legal basis permitted under applicable law, including explicit consent where required.
We do not sell your personal data.
However, we may share personal data with third parties where necessary to provide our services, comply with legal obligations, or protect the safety and rights of customers and others.
These parties may include:
Where necessary to provide certification or training, we may share relevant information with organisations such as SSI, PADI, or another applicable certification agency.
Only information reasonably necessary for the relevant purpose will be shared.
Payment information may be processed by banks, payment processors, or other financial service providers.
Where accommodation is included in or arranged through your booking, relevant information may be shared with the accommodation provider.
Where necessary to organise diving activities, transportation, boat trips, or other services, we may provide relevant booking information to service providers.
Where necessary to protect your health or safety, we may disclose relevant information to medical professionals, emergency services, hospitals, rescue organisations, or your emergency contact.
We may disclose information where required or permitted by applicable law, regulation, court order, or lawful request from a competent authority.
Some of the organisations and service providers we use may be located outside Thailand.
For example, diving certification organisations, communication platforms, payment providers, booking platforms, cloud-service providers, or other technology providers may process personal data outside Thailand.
Where personal data is transferred outside Thailand, Koh Tao Experiences will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection laws and that appropriate safeguards are in place where required.
Customers may contact Koh Tao Experiences through third-party communication platforms, including WhatsApp, email, Facebook, Instagram, or other social-media or messaging services.
If you choose to communicate with us through these services, your information may also be processed by the relevant platform according to its own privacy policy and terms.
Koh Tao Experiences does not control how third-party platforms process information once it is handled by those platforms.
Customers should avoid sending unnecessary sensitive personal information through public social-media messages.
Photographs and videos may be taken during diving activities, courses, trips, or events.
Photographs or videos may be used for:
Where required by applicable law, we will obtain appropriate consent before using identifiable photographs or videos for marketing or promotional purposes.
If you do not wish to appear in promotional photographs or videos, you may inform Koh Tao Experiences.
Where reasonably possible, we will respect such requests.
Our website may use cookies and similar technologies to improve functionality, understand website usage, and provide relevant services.
Cookies may collect information such as:
Some cookies may be provided by third-party services, such as analytics, advertising, booking, payment, or social-media providers.
Where required by applicable law, we will request consent before placing non-essential cookies on your device.
You may also be able to manage cookies through your browser settings.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
Different types of information may be retained for different periods.
When personal data is no longer required, we will take reasonable steps to delete, destroy, anonymise, or otherwise securely dispose of it, subject to applicable legal requirements.
Koh Tao Experiences takes reasonable technical and organisational measures to protect personal data against:
However, no method of electronic storage or transmission can be guaranteed to be completely secure.
Customers should therefore avoid sending unnecessary sensitive information through unsecured communication channels.
Subject to applicable law and any applicable exceptions, you may have rights concerning your personal data, including the right to:
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Some requests may not be possible where we are legally required or permitted to retain or process certain information.
You may choose not to receive marketing communications from us.
If you receive promotional communications from Koh Tao Experiences, you may unsubscribe by:
We will process your request within a reasonable period and in accordance with applicable law.
Please note that opting out of marketing communications will not prevent us from sending necessary service-related communications, such as booking confirmations, payment information, safety notices, or schedule changes.
Some diving activities may be available to minors subject to the applicable requirements of the relevant certification organisation.
Where we collect personal data relating to a child, we will process the information in accordance with applicable laws and may require consent or involvement from a parent or legal guardian where required.
We will only collect information reasonably necessary for the relevant activity, safety, certification, or legal purpose.
Our website or communications may contain links to third-party websites or services.
These may include:
Koh Tao Experiences is not responsible for the privacy practices or content of third-party websites.
Customers should review the privacy policies of those third parties before providing personal information.
If Koh Tao Experiences becomes aware of a personal data breach, we will take appropriate steps to investigate, contain, and address the breach.
Where required by applicable law, we will notify the relevant authorities and/or affected individuals within the applicable timeframe.
We may update this Privacy Policy from time to time to reflect changes in:
The updated version will be published on our website and/or through our official communication channels.
The “Last updated” date at the top of this Privacy Policy indicates when the policy was most recently revised.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns regarding how your personal data is handled, please contact:
Please provide sufficient information to allow us to identify you and understand your request.
We may need to verify your identity before responding to certain requests concerning personal data.
By using the services of Koh Tao Experiences, you acknowledge that you have had the opportunity to read this Privacy Policy and understand how your personal data may be collected and processed.
Where applicable, separate consent will be requested for processing activities that require consent under applicable law.