TM30 Passport Data Privacy Policy

Under the Thai Immigration Act B.E. 2522, Section 38, all accommodation providers (hotels, guesthouses, rental properties) are legally required to notify Thai Immigration of foreign guests within 24 hours of arrival. This notification is known as the "TM30" report. As your accommodation provider, we are obligated by Thai law to collect your passport information to fulfill this legal requirement. The collection of your passport data is therefore based on our legal obligation to comply with Thai immigration law.

To complete the TM30 registration, we collect the following information from your passport: • Full name (as shown on passport) • Passport number • Nationality • Date of birth • Gender • Passport expiry date • A photo/scan of your passport data page We also collect your check-in and check-out dates, and the accommodation address where you are staying.

Your passport data is protected using industry-standard security measures: • End-to-End Encryption: All passport images sent via WhatsApp are protected by end-to-end encryption during transmission. • Secure Storage: Passport images and extracted data are stored in encrypted databases with access controls. • Access Restrictions: Only authorized staff members involved in TM30 processing can access your passport data. • No Third-Party Sharing: Your passport data is only shared with Thai Immigration for TM30 registration. We do not sell or share your data with any other third parties.

We retain your passport data only as long as necessary: • Passport Images: Automatically deleted 90 days after your checkout date. • TM30 Records: Basic registration records (name, passport number, dates) may be retained for up to 1 year to comply with potential immigration audits. • After Deletion: Data is permanently removed from our systems and cannot be recovered.

You have the following rights regarding your personal data: • Right to Access: You can request a copy of the passport data we hold about you. • Right to Rectification: If any data is incorrect, you can request correction. • Right to Erasure: After the legal retention period, you can request deletion of your data. • Right to Withdraw Consent: While TM30 registration is a legal requirement for accommodation, you can choose not to stay at properties requiring registration. To exercise any of these rights, please contact us using the details below.

Your passport data is processed as follows: 1. Collection: You send a passport photo via WhatsApp. 2. OCR Processing: Our secure system extracts the relevant data from the passport image using optical character recognition (OCR). 3. Verification: The extracted data is displayed for your confirmation before processing. 4. TM30 Submission: The data is submitted to the Thai Immigration Bureau's TM30 system. 5. Confirmation: You receive a confirmation with your TM30 reference number. 6. Retention & Deletion: Data is retained for the required period, then automatically deleted.