Privacy Policy

Who we are

This site is operated by CHOR:RATCHAWAT CO., LTD, a company registered in Thailand and trading as Chor Ratchawat Muay Thai Gym, a training camp based in Koh Samui, Surat Thani Province. When this policy refers to "we", "us", or "the gym", it means CHOR:RATCHAWAT CO., LTD. You can reach us at chor.ratchawat@gmail.com or on WhatsApp at +66 63 080 2876.

What we collect

When you book a session, fill in the contact form, or apply for a DTV visa package, we collect your name, email, phone number, and the session or accommodation details you give us. For DTV applications we also collect your nationality and passport number, which are needed for the enrollment letter.

Payments are handled by Stripe. We never see, log, or store your card number. Stripe sends us a payment confirmation and the last four digits, nothing else.

The site uses essential session cookies for login (Supabase Auth) and checkout (Stripe). We do not run third-party analytics, advertising trackers, or social pixels.

How we use it

Booking and payment data is used to confirm your sessions, send receipts, and run the camp day to day. Contact form submissions are used to reply to your message. DTV application data is used to prepare your enrollment letter and the documentation required by the Thai e-visa portal. We do not sell or share your data with third parties for marketing.

Who handles it

We rely on a short list of processors, each handling data under their own published policies:

• Stripe (payments and refunds), based in Ireland and the United States.
• Supabase (database, authentication, file storage), hosted in Singapore.
• Resend (transactional email for booking and DTV confirmations), based in the United States.
• Vercel (website hosting and edge delivery).

How long we keep it

Booking and payment records are kept for two years after the session date, which is the retention period required by Thai tax and accounting rules. DTV application records are kept for two years after the visa is issued or refused. Contact form messages are deleted once the conversation is over, and within six months at the latest. Auth accounts are kept until you delete them or ask us to.

Your rights

You can ask us to access, correct, or delete the data we hold about you. If you booked from the EU or the UK, you also have the right to object to processing, request a copy in a portable format, or lodge a complaint with your local data protection authority. Send any request to chor.ratchawat@gmail.com and we will reply within 30 days.

International transfers

Because our processors are based outside Thailand, your data may be transferred to and stored in Singapore, Ireland, or the United States. Each processor publishes its own safeguards (Standard Contractual Clauses for EU/UK transfers, ISO 27001, SOC 2). We rely on those safeguards rather than maintaining our own.

Changes to this policy

If we change how we handle data, we update this page and the "Last updated" date above. Material changes (new processors, new categories of data) are flagged at checkout or by email if we have your address.

Contact

CHOR:RATCHAWAT CO., LTD — 20, 33 Moo 5, Soi Plai Laem 13, Tambon Bo Put, Koh Samui, Surat Thani (สุราษฎร์ธานี) 84320, Thailand. Phone +66 63 080 2876. Full addresses for both training camps are on the contact page.