Privacy notice
Who is responsible
Gater Tour is a private tour business in Chiang Mai, Thailand, run by Gater. Gater is responsible for the personal data this site collects.
The site is built and run for him by its maintainer, who sees every request too.
What the site collects, and why
When you send a request, the site keeps what you write in the form:
- the trip you ask about, or “Not sure yet”
- the date of your trip
- how many adults and children
- your pickup place, if you give one
- your name
- how you would like a reply, and your phone number, LINE ID, WeChat ID or email address
- your country
- your message, if you write one
It also keeps a reference number, the page you sent the request from, when you sent it, and whether it was sent within 10 minutes of another request with the same contact details. Gater uses your request only to answer you and to arrange your trip. Each request is emailed to him and to the maintainer.
The site also counts visits to its pages, taps on each way to contact Gater, and requests sent (the requests by trip, country and month of travel). The counts are anonymous: they hold no personal data. They show which pages help people get in touch.
To stop spam, the site limits how many requests one connection can send. For this it uses a key made from your IP address, which changes every 24 hours. Neither the site’s database nor its own logs hold your IP address.
The site sets no cookies, stores nothing in your browser, and uses no third-party analytics and no tracking. When you message Gater on WhatsApp, LINE or WeChat, or call or email him, the site doesn’t see what you send: those apps and services handle it under their own terms. So do Facebook and Google Maps when you follow the site’s links to them.
Who else handles it
- Railway hosts the site and its database in Singapore. Its servers log each request your browser makes to the site, with your IP address and your browser’s user agent, and Railway keeps these logs for a limited time.
- Resend sends the request emails, and keeps a copy of each one for 30 days.
- Google runs the two mailboxes that receive the requests: Gater’s and the maintainer’s.
Railway, Resend and Google may handle data in other countries, including the United States. If one of Gater’s network drivers drives your trip, Gater gives that driver what the trip needs, such as your name, pickup place and date. If a request email is delayed, the maintainer passes the request to Gater by chat. Nobody else receives your data, and it is never sold.
How long it is kept
A request is kept for 24 months, then deleted from the site’s database. Its emails are deleted from both mailboxes within a month after that: each month the site lists the requests it has deleted, and Gater and the maintainer delete those emails for good. The list holds only their reference numbers and two dates, and the site deletes it 3 months after the report that lists them. The site keeps its own copy of each request email until 30 days after the email is sent, and never longer than the request. The database is backed up every day, and each backup is kept for up to 6 days, so a deleted request is gone from every backup within 6 days.
Seeing or deleting your data
You can ask to see the data the site holds about you, or to delete it, the request emails included. Message Gater in any of the ways on the Contact page, and you will get an answer within 7 days. You can also complain to Thailand’s Personal Data Protection Committee (PDPC), or to the data protection authority where you live.