Privacy Policy

Scope and data controller

This policy applies to nexagoth.com, Nexago booking requests, contact messages and related service communications. Nexago determines why and how this information is handled for the current service. The registered legal entity name and business address will be added after official company documents are completed.

Information we collect

We collect information you provide directly and limited technical information created when the service is used.

• Identity and contact information, including your name, email address, telephone number and booking reference.
• Trip information, including service type, route, pickup date and time, airport or flight details, passengers, children, luggage, sightseeing plans and special requirements.
• Messages, notes and other information you choose to include in a booking or contact request.
• Limited technical information needed to deliver and secure the website, including server records and the language preference cookie.
• Route search information sent to Google Maps when the booking map is loaded or updated. Google's own privacy terms apply to that service.

Purposes and lawful bases

Depending on the activity, we handle information to take steps you request before a contract, perform an agreed service, pursue legitimate operational and security interests, comply with law, or act on consent where consent is required.

• Review a route, timing, passenger needs, luggage and availability, then prepare an arrangement and price.
• Create, manage and communicate about a booking after the arrangement is accepted.
• Reply to enquiries, provide booking updates and resolve service issues or disputes.
• Maintain service security, prevent misuse, diagnose technical problems and improve reliability.
• Keep records required for legal, accounting, insurance and operational purposes.

Service providers and disclosure

We do not sell personal information. Information may be disclosed only when needed for the purposes described in this policy.

• Supabase for controlled database storage and related infrastructure.
• Resend and email providers for booking confirmations, notifications and replies.
• Google Maps and delivery or content providers needed to display website and route features.
• Transportation providers, professional advisers, insurers, regulators, courts or authorities when necessary for the service or required by law.

International data transfers

Some technology providers may process or store information outside Thailand. Where applicable, Nexago will use reasonable contractual, organisational or legal safeguards and will limit the transfer to information needed for the relevant service.

How long information is kept

Information is kept only for as long as reasonably needed to handle the request, provide the service, maintain operational records, resolve claims and comply with legal, tax, accounting or insurance requirements. Records are deleted, anonymised or securely restricted when they are no longer needed. A formal retention schedule must be confirmed before live operations.

Security

Nexago uses reasonable access controls and technical and organisational measures intended to protect information against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed completely secure, so please do not submit information that is not needed for your request.

Your privacy rights

Subject to the Personal Data Protection Act B.E. 2562 and any applicable exceptions, you may have the following rights. Nexago may request reasonable information to verify identity before responding.

• Ask for access to your personal information and information about how it is used.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for deletion, destruction or anonymisation where the law permits.
• Ask for processing to be restricted or object to certain processing.
• Request portability where the legal conditions are met.
• Withdraw consent for future processing where consent is the lawful basis.
• Complain to Thailand's Personal Data Protection Committee if you believe your rights have not been respected.

Children and special information

A parent, guardian or responsible adult should submit information for a child. Please provide only the child and accessibility information reasonably required to review safe transportation. Do not send passport, medical or other sensitive documents unless Nexago specifically requests them through an appropriate channel.

Changes to this policy

This policy may be updated when the website, service providers, company details or legal requirements change. The revised date will appear at the top. Material changes affecting an active request may also be communicated through an appropriate contact channel.