Privacy Policy

Who we are

This Privacy Policy explains how Wonder Place Co., Ltd. ("Wonder Place", "we", "us") collects, uses, stores and protects personal data of visitors and customers of https://my-wonder-place.com (the "Site"). We are a licensed Thai company providing nanny services, travel planning and family concierge services in Thailand. We act as the Data Controller for personal data we collect through the Site and our services.

• Legal entity: Wonder Place Co., Ltd.
• Tax ID / Company No.: 0105567060938
• Registered office: No.283/39,41, Homeplace Office Building, 8th Floor, Soi Sukhumvit 55 (Thonglor 13), Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
• Contact for privacy requests: info@wonderplace.co.th

What data we collect

We collect only the data we genuinely need to serve you.

Data you give us directly

• Contact form / inquiry form: name, phone number, email, travel dates, destinations, number of children and their ages, any special requirements or notes you choose to share.
• Newsletter: email address only.
• Quotes & invoices (paying customers): billing name, billing address, optionally passport / ID number if required by Thai law for invoicing.
• WhatsApp & email correspondence: the content of messages you send us.

Data collected automatically

• Analytics (Google Analytics 4): anonymised usage data — pages viewed, device type, approximate location (country/region), referrer.
• Cookies: see the Cookies section below.
• Server logs: IP address and basic request metadata, retained for security and debugging for up to 30 days.

Sensitive data

We do not intentionally collect sensitive personal data (health, religion, biometric data, criminal record). If you choose to share information about a child's medical condition or dietary restriction so that we can match the right nanny, we treat it as confidential and share it only with the assigned nanny on a need-to-know basis. You can ask us to delete it at any time.

Legal basis & purposes

Who we share data with

We never sell personal data. We share only with vetted service providers strictly to operate the service, under written confidentiality / DPA terms:

• Hosting & database: Vercel (USA) and Neon (EU — Frankfurt) — for serving the site and storing leads/bookings.
• Email delivery: the SMTP provider configured at the time of sending (e.g. Resend, SendGrid, or Gmail SMTP).
• Analytics: Google Analytics 4 (Google LLC, USA) — only after you accept cookies.
• Payment processors (if applicable): the bank / payment gateway you choose for that specific transaction.
• Our assigned nanny / partner suppliers: only the minimum information needed for them to deliver the service you booked.
• Thai authorities / courts: if and only if compelled by valid Thai legal process.

We do not transfer your data outside Thailand for marketing or profiling.

International transfers

Because our hosting and analytics providers are located outside Thailand (USA and EU), some processing happens outside Thai borders. These transfers are protected by:

• Standard Contractual Clauses (SCCs) for EU/US transfers, or equivalent safeguards;
• The minimum data necessary — we don't ship full datasets abroad;
• The technical security of HTTPS in transit and encryption at rest.

How long we keep your data

Your rights

Under Thailand's PDPA (2019) and the EU GDPR (if you write to us from the EU/EEA), you have the right to:

• Access the personal data we hold about you;
• Rectification of inaccurate or incomplete data;
• Erasure ("right to be forgotten"), subject to legal retention obligations;
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time (e.g. unsubscribe), without affecting prior lawful processing;
• Lodge a complaint with Thailand's PDPC (https://www.pdpc.or.th) or, if you reside in the EU/EEA, your local Data Protection Authority.

To exercise any of these, email info@wonderplace.co.th with the subject line "Privacy Request". We respond within 30 days.

Cookies

We use the minimum cookies needed:

• Essential cookies — required for the site to work (e.g. your language choice, your cookie-consent decision). These are set without a banner.
• Analytics cookies (Google Analytics 4) — set only after you accept via the cookie banner. You can change your mind at any time from the banner.
• We do not use advertising / re-targeting cookies.

Children

Our services serve families with children, but the Site itself is meant for adults aged 18+ booking services. We do not knowingly collect personal data directly from children under 16. If you believe a child has provided us data, contact us and we will delete it.

Security

We protect your data with:

• HTTPS / TLS on the entire site;
• Encrypted database storage (Postgres at rest);
• Strict admin access controls (password + JWT, never shared);
• Regular software updates and dependency audits;
• Principle of least privilege — only the people who need the data can see it.

No system is 100% secure. If we ever detect a personal data breach that may put you at risk, we will notify you and the PDPC within 72 hours as required by law.

Marketing

We will email you only:

1. To reply to an inquiry you sent us, or
2. About a booking you have with us, or
3. With our monthly tips/newsletter if you opted in.

You can unsubscribe at any time via the link in any newsletter, or by emailing info@wonderplace.co.th.

Updates to this policy

We may update this policy from time to time (for example, when we add a new service or change a sub-processor). The "Last updated" date at the bottom always reflects the current version. Substantial changes will be highlighted on the site for 30 days.

Contact

For any privacy question, complaint, or rights request:

• Email: info@wonderplace.co.th
• Postal mail: Wonder Place Co., Ltd., No.283/39,41, Homeplace Office Building, 8th Floor, Soi Sukhumvit 55 (Thonglor 13), Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand

We genuinely answer every privacy email personally — there is no robot here.