Privacy Policy
Flying Lizard Group ("Company") recognizes the importance of the protection of personal data. This Privacy Policy explains our practices regarding the collection, use and disclosure of personal data including other rights of the Data Subjects in accordance with the Personal Data Protection Act B.E. 2562 (2019) and applicable law. Therefore, you can be assured that your personal data entrusted to us will be processed to meet your needs and in accordance with the applicable laws.
Collection of Personal Data
We collect your personal data that you give directly to us by:
- Account registration
- Phone call
- Message
- Bookings
Types of Data Collected
- Personal data such as name
- Contact information such as telephone number, email address
- Transaction and financial information such as purchase history, credit card details, bank account, etc.
- Technical data such as IP address, device and browser information, and cookies or similar identifiers set by Google Ads and the Meta (Facebook) Pixel, and other transaction records (e.g., logs)
- Company information that you provide during the course of customer service
- Other data that you are willing to share such as photos, feedback, and others
Children
Our service does not address anyone under the age of 20. We do not knowingly collect personally identifiable information from anyone under the age of 20. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
Storage of Data
We store your personal data as hard copy and soft file. We store your personal data by using the following systems:
- Google Cloud / Firebase
- Vercel
- Cloudflare
- Stripe
- Resend
Processing of Data
We use the collected data for various purposes:
- To create and manage your account
- To provide direct marketing
- To prepare products and services
- To improve products and services
- To proceed with administrative information
- To proceed with marketing and promotion
- To provide customer support
Sharing Personal Data
We do not share or disclose your personal data except in the circumstances described in this policy.
Products and Services
We share your personal data within our organization to provide and develop our products or services. We may combine information internally across the different goods or services covered by this Privacy Policy to help us be more relevant and useful to you and others.
Service Providers
We may use Service Providers to help us provide our services (e.g., payments, marketing, and development). Service Providers are contractually bound to protect your information. Please note that Service Providers have their own privacy policies.
Business Transfer
In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including your personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Privacy Policy and applicable law.
Law Enforcement
Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Personal Data Retention
We will retain your personal data for as long as necessary during the period you are a customer or under relationship with us, or for as long as necessary in connection with the purposes set out in this Privacy Policy, unless law requires or permits a longer retention period. We will erase, destroy, or anonymize your personal data when it is no longer necessary or when the period lapses.
Security
We use reasonable administrative, logical, physical, and managerial measures to safeguard your information against loss, theft, and unauthorized access, use, and modification. These measures are designed to provide a level of security appropriate to the risks of processing your payment information and other information.
Payment Information Security
We process payments through Stripe, a PCI-compliant payment processor. We do not store your full credit card details on our servers. Payment tokens may be stored for recurring billing purposes.
Data Subject Rights
You may exercise any of these rights within legal requirements and policies:
Withdrawal of Consent:
If you have given consent to collect, use, or disclose your personal data, you have the right to withdraw such consent at any time, unless restricted by law or beneficial contract.
Data Access:
You have the right to access your personal data under the Company's responsibility; to request a copy of such data; and to request disclosure of how we obtained your personal data.
Data Portability:
You have the right to obtain your personal data in a machine-readable format and to request transfer to other data controllers if technically feasible.
Objection:
You have the right to object to collection, use, or disclosure of your personal data if conducted for legitimate interests or public tasks.
Data Erasure or Destruction:
You have the right to request erasure, destruction, or anonymization of your personal data if collection is against relevant laws, retention is no longer necessary, or you withdraw consent.
Processing Suspension:
You have the right to request suspension of processing during examination of your rectification or objection request.
Data Rectification:
You have the right to rectify your personal data to be updated, complete, and not misleading.
Complaint Lodging:
You have the right to complain to competent authorities if you believe processing violates relevant laws.
You can exercise these rights by contacting our Data Protection Officer. We will notify the result of your request within 30 days.
Advertising and Marketing
To enable you to receive benefits from using products or services, we use your information to analyze, personalize, and enhance our products or services and marketing efforts through Google, Facebook, and other platforms. We use such information to provide you with customized recommendations for products or services we think will be of interest to you.
Communications
We will send communications or news for the purpose of utilizing your preference. If you no longer want to receive communications from us via email, you can click the "unsubscribe" link in the email.
Cookies
To improve your experience and to measure the effectiveness of our advertising, we and selected partners use cookies and similar identifiers. The identifiers currently used on our website are:
| Provider | Cookies / identifiers | Purpose |
|---|---|---|
| Google Ads | _gcl_au and related Google / DoubleClick identifiers | Measure advertising conversions and show relevant ads (remarketing). |
| Meta (Facebook) Pixel | _fbp, _fbc | Measure advertising conversions and show relevant ads on Facebook and Instagram. A 1×1 image pixel also loads if JavaScript is disabled. |
| Google Analytics 4 | _ga, _ga_* | Aggregate website-usage and conversion measurement (which pages and campaigns lead to bookings). Linked with Google Ads. |
| Vercel Analytics | None (cookieless) | Aggregate, anonymous traffic and performance statistics. Sets no identifiers on your device. |
If you do not wish to have advertising cookies placed on your device, you can set your browser to refuse cookies before using our website, and you can withdraw your consent at any time using the opt-out controls offered by Google and Meta.
Data Breach Notification
We will notify the Office of the Personal Data Committee without delay and, where feasible, within 72 hours after becoming aware of a data breach, unless such breach is unlikely to result in a risk to your rights and freedoms. If the breach is likely to result in a high risk, we shall also notify you without delay.
Changes to This Policy
We may change this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
This Policy was last updated on June 27, 2026.
Links to Other Sites
This Privacy Policy applies only to our website and services. Any websites from other domains found on our site are subject to their own privacy policies which are not related to us.
Contact Information
If you have any questions about this Privacy Policy, please contact us:
Data Controller
Flying Lizard Group
100/22 Srisoonthorn Road, Moo 7, Si Sunthon, Thalang District, Phuket 83110, Thailand
Email: info@flylizard.com
Website: www.flylizard.com
Data Protection Officer
Flying Lizard Group
100/22 Srisoonthorn Road, Moo 7, Si Sunthon, Thalang District, Phuket 83110, Thailand
Email: info@flylizard.com
