Privacy Policy

Last updated: 22 May 2026

1. Introduction

Siam Martial Arts Training Center Co., Ltd. (“we”, “us”, “our”, or “Bangtao Muay Thai & MMA”) operates the website https://bangtaomuaythai.com (the “Website”) and the related booking platform at https://booking.bangtaomuaythai.com. This Privacy Policy explains what personal information we collect about you, why we collect it, how we use and share it, and what rights you have over your information. By using our Website or services, you agree to the terms of this Privacy Policy. We are committed to protecting your privacy and complying with applicable data protection laws, including the Thailand Personal Data Protection Act B.E. 2562 (“PDPA”), the EU and UK General Data Protection Regulation (“GDPR” / “UK GDPR”) where it applies to you, and the California Consumer Privacy Act / California Privacy Rights Act (“CCPA/CPRA”) where it applies to you.

2. Data Controller and Contact

The data controller responsible for your personal information is:

Siam Martial Arts Training Center Co., Ltd.

Phuket, Thailand
Email: info@bangtaomuaythai.com

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at the email above.

3. Information We Collect

We collect the following categories of personal information:

3.1 Information you give us directly

Identity and contact information: name, date of birth, nationality, email address, phone number, postal address, emergency contact details.
Account and booking information: username, password, training preferences, accommodation requests, dates of stay, class bookings, package selections.
Payment information: processed by our third-party payment providers (Stripe and PayPal). We do not store full credit or debit card numbers on our servers.
Health and fitness information: injuries, medical conditions, allergies, fitness goals, body composition results, and other information you provide on intake forms, waivers, the feedback survey, or to our coaches. This may include sensitive personal data, which we only process with your consent.
Marketing preferences: information you provide when signing up for our newsletter or responding to surveys.
Communications: messages you send us via email, contact forms, WhatsApp, or social media.

3.2 Information we collect automatically

Device and usage data: IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, links clicked, and approximate location based on IP.
Cookies and similar technologies: see Section 8 below.
Analytics and advertising identifiers collected via Google Tag Manager, Google Analytics, and the Meta (Facebook) Pixel.

3.3 Information from third parties

Booking and payment confirmations from Stripe and PayPal.
Email engagement data (opens, clicks, bounces) from Mailchimp.
Information from social media platforms when you interact with our pages or ads.
Reviews and ratings you post on platforms such as Google.

4. How We Use Your Information

We use your personal information for the following purposes:

To provide our services: process bookings, accept payments, deliver training, manage accommodation, respond to enquiries, and provide customer support.
To ensure your safety: review health and injury information, supervise training, and respond to emergencies.
To operate and improve our Website and services: analyse usage, troubleshoot, develop new offerings, and personalise content.
To communicate with you: send booking confirmations, schedule changes, important notices, and respond to your messages.
For marketing: send our newsletter, promotions, event invitations, and targeted ads, where you have given consent or where allowed by law. You can opt out at any time.
To comply with legal obligations: tax, accounting, immigration, health and safety, and dispute resolution.
To protect our rights: prevent fraud, enforce our Terms & Conditions, and defend legal claims.

5. Legal Bases (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases for processing your personal information:

Performance of a contract: to provide the services you book with us.
Consent: for marketing communications, non-essential cookies, and processing of health-related information. You may withdraw consent at any time.
Legitimate interests: to operate, secure, and improve our Website and services, prevent fraud, and conduct direct marketing to existing customers where permitted.
Legal obligation: to comply with applicable laws.
Vital interests: in rare cases where processing is necessary to protect your life or health (for example, during a medical emergency).

6. How We Share Your Information

We do not sell your personal information. We share it only with the following categories of recipients:

Service providers acting on our behalf, including: Stripe and PayPal (payment processing), Mailchimp (email marketing), Google (Tag Manager, Analytics, Ads), Meta Platforms (Facebook/Instagram advertising and the Pixel), our booking platform provider, accommodation partners, and our website hosting provider.
Professional advisers such as accountants, auditors, lawyers, and insurers, where necessary.
Government authorities, regulators, and law enforcement, where required by law.
Acquirers or successors in the event of a sale, merger, reorganisation, or transfer of all or part of our business.

Some of these recipients are located outside Thailand, including in the United States and the European Union. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient’s certification under recognised transfer frameworks.

7. International Data Transfers

We are based in Thailand. If you access our Website or services from outside Thailand, your personal information will be transferred to, stored, and processed in Thailand and in other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

For transfers from the EEA, UK, or other regions with data export restrictions, we put in place appropriate safeguards, such as standard contractual clauses, to protect your information

8. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies (such as pixels and local storage) for the following purposes:

Strictly necessary: required for the Website to function, including security and load balancing.
Performance and analytics: to understand how visitors use our Website, via Google Analytics and Google Tag Manager.
Advertising and targeting: to deliver relevant ads and measure their performance, via the Meta (Facebook) Pixel and Google Ads.
Functional: to remember your preferences and improve your experience.

You can control cookies through your browser settings and, where required by law, through the cookie banner on our Website. Disabling certain cookies may affect Website functionality.

9. Data Retention

We keep your personal information only for as long as necessary for the purposes set out in this Privacy Policy and to comply with our legal obligations. Typical retention periods are:

Booking and transaction records: at least 5 years, to comply with Thai tax and accounting law.
Health, waiver, and incident records: at least 5 years after your last visit, to defend potential legal claims.
Marketing data: until you unsubscribe or otherwise withdraw consent, plus a short retention period for record-keeping.
Website analytics: typically up to 14 months.

After the relevant period, we will delete or anonymise your information.

10. Your Rights

Depending on where you live, you may have the following rights in respect of your personal information:

Access: request a copy of the personal information we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: ask us to delete your personal information, subject to legal exceptions.
Restriction: ask us to limit how we use your information.
Objection: object to processing based on legitimate interests, or to direct marketing.
Portability: receive your information in a structured, commonly used, machine-readable format.
Withdraw consent: where we rely on your consent, you may withdraw it at any time without affecting prior processing.
Lodge a complaint: with the Personal Data Protection Committee in Thailand, or with the data protection authority in your country (such as the Information Commissioner’s Office in the UK or a relevant EU supervisory authority).

California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected, sold, or shared, the right to delete personal information, the right to correct, and the right to opt out of “sales” or “sharing” of personal information as defined under California law. We do not sell your personal information in the traditional sense, but use of advertising cookies may be considered “sharing” under the CCPA. You may opt out via our cookie controls or by contacting us. To exercise any of these rights, contact us at info@bangtaomuaythai.com. We may need to verify your identity before responding.

11. Children’s Privacy

Our Website is not directed at children under 13, and we do not knowingly collect personal information from children under 13 through the Website. We do offer training to minors at our facility; in those cases, we collect information from, and with the consent of, a parent or legal guardian. If you believe we have collected information from a child without appropriate consent, please contact us so we can delete it.

12. Security

We use reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Third-Party Links

Our Website may contain links to third-party websites and services, including our affiliated store at https://bangtaofightstore.com and social media platforms. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date at the top. If the changes are material, we will provide additional notice (such as a banner on the Website or an email). Your continued use of our Website after the changes take effect means you accept the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at: Siam Martial Arts Training Center

Email: info@bangtaomuaythai.com

Website: https://bangtaomuaythai.com