Privacy Policy
Learn how we collect, use, and protect your personal information
Last updated: February 2026
Quick Navigation
1. Introduction
This Privacy Policy explains how SKY WORLD ADVENTURES Co., Ltd.(operating as "Three Monkeys") and Chamnanthang Co., Ltd.(operating as "ONEBOOKING" for online payment processing) collect, use, disclose, and safeguard your information when you visit our website or use our services.
We are committed to protecting your privacy and complying with the Thailand Personal Data Protection Act (PDPA) and other applicable data protection laws.
2. Data Controllers
SKY WORLD ADVENTURES Co., Ltd.
Data controller for information related to your visit, dining experience, and general customer service.
Chamnanthang Co., Ltd.
Data controller for online booking and payment processing. Your credit card statement will display payments as "ONEBOOKING".
3. Information We Collect
3.1 Personal Information
We may collect personal information that you provide to us, including:
3.2 Payment Information
Payment information is processed securely by our payment processor, Stripe. We do not store your full credit card details on our servers. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payment industry.
3.3 Automatically Collected Information
When you visit our website, we may automatically collect:
4. How We Use Your Information
We use the information we collect to:
5. Legal Basis for Processing
Contract
To fulfill our booking agreement with you
Consent
For marketing communications and non-essential cookies
Legitimate Interest
To improve our services and prevent fraud
Legal Obligation
To comply with tax, accounting, and safety regulations
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
8. Your Rights Under PDPA
Under the Thailand Personal Data Protection Act, you have the right to:
Access
Request a copy of the personal data we hold about you
Rectification
Request correction of inaccurate or incomplete data
Erasure
Request deletion of your personal data
Restriction
Request limitation of processing
Data Portability
Receive your data in a structured format
Objection
Object to processing based on legitimate interests
Withdraw Consent
Withdraw consent for marketing at any time
Complaint
Lodge a complaint with the PDPC
10. Data Retention
We retain your personal information for:
Booking Records
7 years (for tax and accounting)
Marketing Preferences
Until you withdraw consent
Website Analytics
26 months (anonymized)
Customer Support
3 years after last interaction
11. International Data Transfers
Your information may be transferred to and processed in countries other than Thailand, including:
United States
Stripe payment processing, cloud services
European Union
Email services
We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
General Inquiries
SKY WORLD ADVENTURES Co., Ltd.
Payment & Booking Inquiries
Chamnanthang Co., Ltd. / ONEBOOKING