Who we are
Halia Group is a boutique destination management company operating on Koh Samui, Thailand. The data controller for this website and all program-related communication is Halia Group. The contact point for data protection inquiries is hello@haliagroup.com.
What data we collect
We collect personal data in three contexts:
When you submit the contact form
We collect your name, company, role (optional), email, phone (optional), group size (optional), program dates (optional), program type, and the message content. This information is submitted by you for the explicit purpose of receiving a response from Halia regarding a potential program.
When you use the chat widget
We retain your conversation messages locally in your browser (using localStorage) so the chat persists across sessions on your device. The conversation content is also sent to Anthropic’s Claude API to generate responses. We do not attach your name, email, or any identifier to chat conversations unless you provide them in the conversation itself.
When you visit the site
We use Vercel Analytics and Vercel Speed Insights to understand site performance and aggregate traffic. These tools are designed to be cookieless and do not track individual users across sites. No advertising cookies, no marketing pixels, no third-party advertising trackers run on this site.
Why we collect it
- Inquiry processing. To respond to your inquiry, prepare a tailored proposal, and deliver any resulting program.
- Legal and accounting compliance. Thai law requires us to retain transactional records for 5 to 7 years depending on the document type.
- Site improvement. Aggregate analytics help us understand which pages are useful and which are not. No individual user is identified.
Our lawful basis under GDPR is legitimate interest for B2B inquiry handling and contract performance for any program delivery. Marketing communications, if any, are sent only with explicit consent.
How long we retain it
- Contact form submissions: 7 years (Thai accounting requirement).
- Chat widget conversations: stored only in your browser’s
localStorageuntil you clear it. Halia does not retain server-side chat history. - Program delivery records: 7 years from the program completion date.
- Analytics aggregates: indefinitely, but contain no personally identifiable information.
Where we store it
Personal data submitted through the contact form is stored in a private GitHub repository hosted by GitHub, Inc. (United States). Outbound program-delivery email is sent through Resend (United States). Site analytics are processed by Vercel (United States). Chat queries are processed by Anthropic (United States). All providers are SOC 2 certified or equivalent.
Where data crosses borders (Thailand to the United States or European Union), we rely on standard contractual clauses and equivalent safeguards required by GDPR Article 46 and the Thai PDPA cross-border transfer rules.
Third parties we share data with
We share personal data only with the third parties named above and only to the extent necessary to deliver the service you requested. We do not sell, rent, or otherwise transfer your data to any third party for marketing purposes.
For program delivery, your booking details may be shared with the hotel and supplier partners required to operate your specific program. This sharing is limited to operational necessities (your name, dietary requirements, room preferences) and never includes financial or sensitive personal data beyond what the supplier requires.
Your rights
You have the right to:
- Request a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to retention requirements imposed by Thai law)
- Withdraw consent for any optional data processing
- Lodge a complaint with the relevant supervisory authority
To exercise any of these rights, email hello@haliagroup.com. We respond within 30 days.
Cookies
This site uses essential cookies only (for site functionality and preferences). We do not use marketing or advertising cookies. Vercel Analytics is cookieless. The chat widget uses localStorage rather than cookies to persist conversations on your device.
Children
This site is intended for business buyers and is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
If we update this policy, we will publish the revised version here and update the “last updated” date at the top. Material changes will be communicated to active program clients via email.
Contact
Privacy questions: hello@haliagroup.com. Subject line: “Privacy inquiry”.