Privacy notice

Who is responsible for your data

This website is run by Suphalak Chantong, trading as Move to Hua Hin, based in Hua Hin, Prachuap Khiri Khan, Thailand. This is a sole trader, not a registered company. For the purposes of the Thai Personal Data Protection Act and, where it applies, the UK and EU GDPR, that person is the data controller.

You can reach us at [email protected], on LINE at @663jewrw, or on +66 92 992 3499 by phone or WhatsApp. Use any of those to ask what we hold about you or to have it deleted.

What we collect, and when

We only collect what you type in. There is no account to create and nothing is gathered in the background beyond what is listed here.

When you send an enquiry through the booking form, we receive your name, email address and phone number, whether you use LINE or WhatsApp and the handle you gave, your rough timeline, which parts of a move you want help with, and any notes you added.

Recorded automatically with each enquiry, so we can tell a real message from an automated one: your IP address, the country our host derives from it, your browser's user-agent string, and the time you sent it.

When you ask to be told about rule changes, we receive your email address and nothing else.

When you email, call, or message us on LINE or WhatsApp, we hold that conversation and whatever you chose to put in it.

Downloading the relocation checklist collects nothing. It is a direct file download and asks for no details.

If you book us to come to a hospital appointment

This one needs saying separately, because health information is treated as sensitive personal data under the Thai Personal Data Protection Act and as special category data under the GDPR. Both require a higher standard than the rest of this notice.

We will only ever handle it with your explicit consent, given separately from anything else you have agreed to, and you can withdraw it at any time without giving a reason and without affecting any other service we provide you.

What we necessarily learn in order to do the job: which hospital or clinic, the department, the date and time, your hospital number, and whatever you choose to tell us about why you are going.

What we write down is the minimum needed to book the appointment, get you registered and chase the follow-up. We do not keep clinical notes, test results, diagnoses or prescriptions. We are not in the consulting room and we do not interpret the clinical conversation — the hospital's own interpreter does that.

Who we speak to. We speak to hospital reception, records and billing staff as your representative, and to your insurer if you ask us to. We do not discuss your health with your family, your friends or anyone else without your specific permission, and that includes relatives abroad who contact us wanting an update. If you would like a named person to be kept informed, tell us in writing who, and we will confirm it back to you.

Appointment records are deleted twelve months after your last appointment with us, sooner if you ask. If you never book this service, none of this section applies to you.

Why we hold it, and on what basis

Enquiry details are held so we can reply to you and, if you go ahead, provide the service you asked for. Under the GDPR that is Article 6(1)(b), steps taken at your request before entering a contract. Under the Thai PDPA it rests on your consent and on the necessity of performing what you asked for.

Email addresses given for rule-change updates are held on consent alone. You can withdraw that at any time and we will delete the address.

The IP address, country and user-agent recorded with an enquiry are held on legitimate interests, namely keeping the form usable and filtering out automated submissions.

Health information handled for a hospital appointment rests on your explicit consent alone — Article 9(2)(a) of the GDPR where it applies, and Section 26 of the Thai PDPA. Nothing else. Withdraw it and we delete what we hold.

We do not use your details to build a profile, we do not run advertising, and we do not sell anything to anyone.

Who else can see it

Cloudflare, Inc. hosts this website and stores enquiries. Their servers are global, so your data may sit outside Thailand and outside your own country.

Zoho Corporation provides our email. Anything you email us, and any notification we send ourselves about your enquiry, passes through and is stored on their systems.

LINE Corporation and Meta Platforms operate LINE and WhatsApp. If you choose to message us there, that conversation sits on their systems under their own terms, not ours.

Hospitals, clinics and insurers. If you book us for an appointment, we identify ourselves to reception, records and billing staff as acting for you, and deal with your insurer where you have asked us to. They hold their own records under their own terms.

Beyond those, nobody. Part of what we do is introduce people to estate agents, lawyers, shipping companies and schools — but we ask you first, every time, and we pass on only what you agree to. We never hand your details to a third party so they can sell to you.

We would disclose information if Thai law or a valid legal order required it. That has not happened.

How long we keep it

Enquiries are kept for twenty-four months after we last hear from you, then deleted. If you become a client we keep what we need for as long as tax and accounting rules require. Email addresses on the updates list are kept until you unsubscribe. Ask us to delete any of it sooner and we will.

Cookies and tracking

This site sets no cookies and stores nothing in your browser. We measured it: loading any page on this site contacts no third-party server at all.

We use Cloudflare Web Analytics to count visits. It does not use cookies, does not fingerprint you and does not follow you to other websites. It tells us how many people read a page, roughly where in the world they were and what they arrived from. It cannot tell us who you are.

Some pages embed YouTube videos. These show a still image only — nothing loads from Google until you click play. If you do click, the video is served from youtube-nocookie.com and Google's own privacy terms apply from that point.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, object to us holding it, ask for it in a portable format, or withdraw a consent you gave earlier.

Email [email protected] and say what you want. We will reply within thirty days and there is no charge. We may ask you to confirm your identity first, so that we are not handing your details to somebody else.

If you are unhappy with how we handled it

Tell us first — most things are a misunderstanding and get fixed the same week. If that does not resolve it, you can complain to a regulator. In Thailand that is the Office of the Personal Data Protection Committee (PDPC). In the United Kingdom it is the Information Commissioner's Office. In the EU it is the data protection authority for the country you live in.

Children

This service is for adults arranging a move. We do not knowingly collect data about anyone under 18. If your enquiry mentions your children, we hold only what you chose to tell us and only for as long as we are helping you.

Changes to this notice

If we change how any of this works — a new provider, a different retention period — we will update this page and change the date at the top. We will not quietly start doing something this notice says we do not do.