Privacy Policy

Last updated: April 2026

Insurance Thailand (“we”, “us”, or “our”) operates the website insurance-thailand.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller for this website under the GDPR is:

2. Information We Collect

Information You Provide

When you use our contact form, request a quote, or interact with our chatbot, we may collect:

• Name
• Email address
• Information about your insurance needs (visa type, age, travel dates, etc.)
• Any other information you voluntarily provide

Information Collected Automatically

When you visit our website, we automatically collect:

• IP address (anonymized)
• Browser type and version
• Pages visited and time spent
• Referring website
• Device information

3. Purpose and Legal Basis for Processing

We process your data for the following purposes:

• Responding to your inquiries and providing insurance options (Art. 6(1)(b) GDPR)
• Improving our website and user experience (Art. 6(1)(a) GDPR — consent)
• Analyzing website traffic and usage patterns (Art. 6(1)(a) GDPR — consent)
• Complying with legal obligations (Art. 6(1)(c) GDPR)

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Non-essential cookies are only set after you give your consent via our cookie consent banner.

We use the following cookie categories:

• Essential cookies: Required for the technical operation of the website
• Analytics cookies: Help us understand how visitors use our site (Google Analytics, Microsoft Clarity)
• Affiliate cookies: Track referrals to insurance providers for commission purposes

You can withdraw or change your consent at any time via the cookie icon on our website.

5. Third-Party Services

We use the following third-party services that may process personal data:

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics analyzes anonymized user behavior on our website. IP addresses are automatically anonymized. Data processing occurs only after your explicit consent. Data may be transferred to the United States based on the EU Standard Contractual Clauses.

Microsoft Clarity

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Clarity creates anonymized session recordings and heatmaps to help us improve the usability of our website. Form inputs are not recorded. Data processing occurs only after your explicit consent.

Google reCAPTCHA

Provider: Google Ireland Limited. We use reCAPTCHA to protect our contact form from automated abuse (spam bots). The legal basis is our legitimate interest in spam protection (Art. 6(1)(f) GDPR).

“Noa” Chatbot

Our website offers an AI-powered chatbot (“Noa”) hosted on our own servers. When you use the chatbot, your name, email address, and conversation content are processed to answer your inquiry. To generate responses, we use the API of Anthropic PBC (548 Market St, PMB 90375, San Francisco, CA 94104, USA). Data transfer to Anthropic is based on the EU Standard Contractual Clauses. The use of the chatbot is voluntary and only occurs after you actively click the chat icon.

Google Workspace

We use Google Workspace (Google Ireland Limited) to process our email communications. When you send us an email or we reply to you, your data is processed via Google servers.

Insurance Affiliate Partners

When you click on an affiliate link on our website, the respective insurance provider may set cookies to track the referral. More information can be found in our Affiliate Disclosure.

6. Data Sharing

We do not sell your personal data. We may share your information:

• With your explicit consent
• To comply with legal obligations
• With service providers who help us operate the website (under data processing agreements)
• With insurance and broker partners you have chosen, if you have requested a quote

7. International Data Transfers

Your data may be transferred to providers in third countries outside the EU/EEA (particularly the United States, where Google, Microsoft, and Anthropic operate servers). We ensure that appropriate safeguards such as the EU Standard Contractual Clauses are in place for such transfers.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including SSL encryption for data transmission. However, no method of transmission over the internet is 100% secure.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Information about what data we hold about you
• Right to rectification (Art. 16 GDPR): Correction of inaccurate data
• Right to erasure (Art. 17 GDPR): “Right to be forgotten”
• Right to restriction (Art. 18 GDPR) of processing
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) to processing
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw your consent at any time
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us using the contact details below. The competent supervisory authority in Estonia is the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate). You may also contact the supervisory authority in your country of residence.

10. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Contact form submissions are typically retained for 2 years unless you request earlier deletion.

11. Children’s Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top. We encourage you to review this page periodically.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: