Política de privacidad | ThaiDigitalCard

Effective Date: March 1, 2026 Last Updated: August 23, 2026

ThaiDigitalCard.com ("we," "us," or "our") operates a third-party travel document assistance service for Thailand Digital Arrival Card (TDAC) applications. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

1.1 Information You Provide

When using our service, you voluntarily provide:

Passport details: Full name, passport number, nationality, date of birth, gender
Travel information: Arrival/departure dates, flight details, accommodation address, purpose of travel
Contact information: Email address, phone number
Health declaration: Countries visited in the last 14 days

1.2 Information Collected Automatically

Device data: Browser type, operating system, screen resolution
Usage data: Pages visited, time spent, referral source
IP address: For security, fraud prevention, and Turnstile verification
Cookies: Session cookies for site functionality and analytics

1.3 Payment Information

Payment is processed entirely by Stripe, Inc. (PCI DSS Level 1 certified). We do not store, process, or have access to your full credit card number, CVV, or billing address. We only receive a transaction confirmation and payment amount from Stripe.

2. How We Use Your Information

We use your personal information exclusively to:

Process and submit your TDAC application to Thai Immigration
Send confirmation emails, status updates, and your approved TDAC document
Provide customer support and respond to inquiries
Prevent fraud and ensure service security
Comply with applicable legal obligations

We do NOT use your information for marketing, advertising, profiling, or any purpose unrelated to your TDAC application.

3. Data Storage & Security

3.1 Encryption

Sensitive fields (passport numbers) are encrypted at rest using AES-256-GCM encryption
All data in transit is protected by 256-bit TLS/SSL encryption
Uploaded documents (TDAC PDFs) are stored in encrypted cloud storage (Cloudflare R2)

3.2 Infrastructure

Our service runs on Cloudflare Workers with data stored in Cloudflare D1 (database) and R2 (file storage), both located in secure, SOC 2 Type II certified data centers.

3.3 Access Controls

Access to personal data is restricted to authorized staff members with role-based permissions. All administrative access is logged.

4. Data Sharing

We share your personal information only with:

Thai Immigration Bureau — as required to process your TDAC application
Stripe, Inc. — for payment processing
Resend — for transactional email delivery (confirmation, status updates)
Cloudflare — infrastructure provider (Turnstile verification, hosting)
Microsoft Clarity — consent-controlled, cookieless or cookie-based website usage analytics
Yandex Metrica — consent-controlled traffic and interaction analytics on public pages

We do NOT sell, rent, or trade your personal information to any third party.

5. Data Retention

Application data: Retained for 12 months after your travel date, then permanently deleted
Payment records: Retained for 7 years as required by financial regulations
Contact messages: Retained for 6 months after resolution
Uploaded documents: Retained for 90 days after application completion

You may request early deletion by contacting support@thaidigitalcard.com.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data (subject to legal retention requirements)
Export your data in a portable format
Withdraw consent for data processing

To exercise any of these rights, email us at support@thaidigitalcard.com with your application number.

7. Children's Privacy

Our service is not directed at children under 13. While TDAC applications may be submitted for minors by their parents or legal guardians, we do not knowingly collect information from children without parental consent.

8. International Transfers

Your data may be processed in multiple regions through Cloudflare's global network. All transfers are protected by encryption and Cloudflare's security measures.

9. Cookies

We use essential cookies and, when you select Accept All, optional analytics cookies:

Session cookies — maintain your application state during form completion
Cloudflare analytics — anonymous usage statistics (no personal data)
Turnstile — bot protection verification
Microsoft Clarity — session and interaction analytics; without consent it operates in cookieless mode
Yandex Metrica — traffic analytics, click maps, and session replay after consent; disabled on application and payment routes

We do not enable advertising storage for Microsoft Clarity. You can decline optional analytics cookies, including Yandex Metrica, by selecting Essential Only.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date.

11. Contact Us

For privacy-related inquiries or to exercise your data rights:

Email: support@thaidigitalcard.com Subject line: Privacy Inquiry — [Your Application Number]

ThaiDigitalCard.com is an independent third-party service and is not affiliated with the Thai Government or any official immigration authority.