PRIVACY POLICY
The Camp Chiangmai Co., Ltd.
Effective Date: 24 August 2026
The Camp Chiangmai Co., Ltd. ("The Camp", "we", "us", or "our") respects your privacy and is committed to protecting Personal Data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA") and other applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, store, transfer, and protect Personal Data relating to customers, members, training participants, visitors, parents and guardians, website users, accommodation guests, and other persons who interact with The Camp.
This Policy applies to Personal Data collected through our website, registration and membership systems, booking systems, payment processes, training activities, accommodation and related services, communications, CCTV systems, forms and waivers, and in-person interactions at The Camp.
1. DATA CONTROLLER
The Data Controller responsible for Personal Data covered by this Policy is:
The Camp Chiangmai Co., Ltd.
417 Moo 12, Nong Khwai, Hang Dong
Chiang Mai Province
Thailand 50230
Email: info@thecamp-chiangmai.com
Questions or requests concerning Personal Data may be directed to the contact details above.
2. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with The Camp, we may collect Personal Data including your name, date of birth, address, nationality where relevant, telephone number, email address, emergency contact information, parent or guardian information, membership and booking information, training records, attendance information, transaction and payment records, correspondence, signed waivers and electronic acceptance records, photographs and video where applicable, CCTV footage, technical and website usage information, and other information reasonably necessary to provide our services.
Where relevant to safe participation in training, you may also voluntarily provide information concerning injuries, medical conditions, physical limitations, medication, previous concussion, allergies, or other health-related matters.
Health information and certain other categories of information may constitute Sensitive Personal Data under the PDPA and will be processed only where a lawful basis exists, including explicit consent where required.
3. HOW WE COLLECT PERSONAL DATA
We may collect Personal Data directly from you when you register, purchase a service, book training or accommodation, sign a waiver or other document, contact us, complete an online or physical form, communicate with our staff, participate in training, use our facilities, or otherwise interact with The Camp.
Where a participant is a minor, information may be provided by a parent or legal guardian.
We may also receive information through service providers used to administer memberships, bookings, payments, communications, website functions, or other legitimate business operations.
CCTV footage may be collected automatically in designated areas of our premises.
Technical information relating to website use may be collected through cookies or similar technologies as described in our applicable Cookie Policy or cookie notice.
4. PURPOSES OF PROCESSING
We may process Personal Data where reasonably necessary to register and identify customers and participants; administer memberships, training packages, Private Sessions, bookings, accommodation and other services; process payments and maintain transaction records; determine training eligibility and manage safety; communicate with customers; provide customer support; respond to accidents and emergencies; manage parent, guardian and emergency contact information; protect persons and property; operate CCTV and investigate safety or security incidents; prevent fraud, abuse or unauthorized access; handle complaints and disputes; comply with legal, accounting, tax, regulatory and other obligations; establish, exercise or defend legal claims; maintain appropriate operational and business records; and improve the safety and administration of our services.
We may also use contact information for marketing or promotional communications where permitted by applicable law. Where consent is required, such communications will be sent only on the basis of valid consent and you may withdraw or opt out of such communications.
Photographs, video, likeness or voice used for promotional or marketing purposes will be processed in accordance with applicable law and, where consent is the applicable legal basis, only where appropriate consent has been obtained.
5. LEGAL BASES FOR PROCESSING
Depending on the circumstances, we may process Personal Data because the processing is necessary to perform or enter into a contract with you; comply with a legal obligation; pursue legitimate interests of The Camp or another person where those interests are not overridden by your fundamental rights; protect vital interests in appropriate circumstances; establish, exercise or defend legal claims; act on your consent; act on your explicit consent for Sensitive Personal Data; or rely on another lawful basis permitted under applicable law.
We do not rely on consent where another lawful basis appropriately applies merely because you have signed a waiver or accepted this Privacy Policy.
Where processing is based on consent, you may withdraw that consent in accordance with applicable law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
6. HEALTH AND OTHER SENSITIVE PERSONAL DATA
Muay Thai and other physical training may require limited information concerning a participant's health or physical condition to help determine whether participation can be conducted safely.
Where required by applicable law, The Camp will obtain explicit consent before processing health-related or other Sensitive Personal Data.
Such information will be limited to what is reasonably relevant to training safety, emergency response, administration, legal obligations, or the establishment, exercise or defence of legal claims.
Relevant information may be made available to authorized trainers or staff only where reasonably necessary for safety or other lawful purposes.
Where information reasonably necessary for safe participation is not provided, The Camp may be unable to permit participation in some or all activities.
7. PERSONAL DATA OF MINORS
The Camp provides certain services to minors subject to applicable participation rules and parent or guardian requirements.
Where Personal Data relating to a minor is collected, we will take reasonable steps to ensure that it is processed appropriately and in accordance with applicable law.
Where consent or explicit consent is legally required, we will obtain consent from or together with a parent or legal guardian to the extent required by applicable Thai law.
Parents and legal guardians may contact us regarding Personal Data relating to a minor for whom they have lawful responsibility.
We do not knowingly use a minor's Personal Data for marketing purposes on the basis of consent unless the legally required consent has been obtained.
8. EMERGENCY CONTACT INFORMATION
Participants may provide Personal Data concerning another person as an emergency contact.
By providing such information, the participant should ensure, where reasonably practicable, that the emergency contact is aware that their information has been provided to The Camp for emergency and safety purposes.
Emergency contact information will be used principally for safety, emergency communication, and related administrative purposes.
9. CCTV
CCTV may operate in designated areas of The Camp for safety, security, crime prevention, investigation of incidents, protection of persons and property, and the establishment, exercise or defence of legal claims.
CCTV is not intended to operate in areas where individuals reasonably expect a high level of privacy, such as toilets or other inappropriate private areas.
Appropriate notices or signage will be displayed where required.
CCTV footage will be accessible only to authorized persons and may be disclosed where reasonably necessary to law-enforcement authorities, insurers, professional advisers, courts, competent authorities, or other persons where permitted or required by law.
CCTV footage will be retained only for the period reasonably necessary for the applicable security purpose. Footage relating to a specific accident, complaint, investigation, legal claim, or security incident may be retained for a longer period where reasonably necessary or legally required.
10. PHOTOGRAPHS, VIDEO AND MEDIA
The Camp may take photographs or video in connection with its activities.
Where identifiable photographs, video, likeness, or voice are used for promotional or marketing purposes on the basis of consent, participation in such media use will be voluntary and will not be a condition of receiving ordinary training services.
A person may withdraw consent for future consent-based use by contacting The Camp.
Withdrawal does not affect the lawfulness of processing undertaken before withdrawal. Following withdrawal, The Camp will cease new consent-based use and will take reasonable steps concerning material under its control where required by applicable law.
11. DISCLOSURE OF PERSONAL DATA
We may disclose Personal Data only where reasonably necessary and permitted by law.
Recipients may include authorized employees and trainers; companies providing membership, booking, accommodation, payment, communications, website, cloud-storage, IT, security or related services; medical or emergency providers; insurers; accountants, auditors, lawyers and other professional advisers; governmental, regulatory or law-enforcement authorities; courts; and other persons where disclosure is legally required or reasonably necessary for a lawful purpose.
Service providers acting on our behalf are expected to process Personal Data only as appropriate for the services they provide and subject to applicable data-protection requirements.
We do not sell Personal Data as a business activity.
12. INTERNATIONAL TRANSFERS
Some service providers or technology systems used by The Camp may process or store Personal Data outside Thailand.
Where Personal Data is transferred internationally, we will take steps required under applicable Thai data-protection law, including the use of appropriate safeguards where required.
We do not represent that all Personal Data is necessarily stored only in Thailand.
13. PAYMENT INFORMATION
Payments may be processed through banks, payment gateways, card processors, or other third-party payment service providers.
The Camp may receive transaction information necessary to confirm and administer a payment but may not receive or retain complete payment-card details where those details are processed directly by the payment provider.
Payment providers process Personal Data under their own applicable terms and privacy practices.
14. DATA RETENTION
We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period necessary to comply with legal obligations, maintain accounting or transaction records, resolve disputes, investigate incidents, or establish, exercise or defend legal claims.
Membership, booking, waiver, transaction and customer-service records may be retained for the duration of the customer relationship and thereafter for the period reasonably required for applicable legal, accounting, tax, contractual or claims-related purposes.
Health-related information will not be retained longer than reasonably necessary for the relevant safety, administration, legal or claims-related purpose.
CCTV footage is retained for the shortest period reasonably appropriate for security purposes unless footage must be preserved for an incident, investigation, complaint, insurance matter, legal claim, or legal requirement.
Consent records may be retained for as long as reasonably necessary to demonstrate whether and when valid consent was given or withdrawn.
When Personal Data is no longer required, we will take reasonable steps to delete, destroy, anonymize, or otherwise securely dispose of it, subject to applicable law and technical limitations concerning secure backup systems.
15. DATA SECURITY
We use reasonable administrative, organizational, physical, and technical measures designed to protect Personal Data from accidental or unlawful loss, destruction, alteration, unauthorized access, disclosure, or misuse.
Access to Personal Data is restricted according to operational need and appropriate authorization.
No electronic system, transmission method, or storage system can be guaranteed to be completely secure, and therefore absolute security cannot be promised.
16. PERSONAL DATA BREACHES
Where a Personal Data breach occurs, The Camp will assess the nature and potential consequences of the incident and take appropriate remedial measures.
Where notification to the Personal Data Protection Committee, affected individuals, or another competent authority is required under applicable law, The Camp will make such notification within the period required by law.
17. YOUR RIGHTS
Subject to the PDPA, applicable exceptions, and the circumstances of the processing, you may have the right to request access to and copies of your Personal Data; request correction of inaccurate or incomplete information; request deletion, destruction or anonymization where legally available; request restriction of processing; object to certain processing; request data portability where applicable; withdraw consent where processing is based on consent; and lodge a complaint with the competent Thai data-protection authority.
The exercise of a right is not absolute and may be subject to legal exceptions.
We may request sufficient information to verify your identity and authority before acting on a request.
Requests may be sent to:
We will respond within the period required by applicable law.
18. MARKETING COMMUNICATIONS
Where permitted by law, we may communicate with customers about The Camp's services, programs, events, or promotions.
Where marketing communications require consent, you may withdraw that consent or unsubscribe at any time.
Withdrawal from marketing does not prevent us from sending operational, booking, payment, safety, legal, or other non-marketing communications that are necessary in connection with our relationship with you.
19. COOKIES AND WEBSITE TECHNOLOGIES
Our website may use cookies and similar technologies for essential website functions, security, analytics, preferences, and other purposes described in our applicable Cookie Policy or cookie notice.
Where consent is legally required for a particular category of cookie or tracking technology, it will be used subject to the applicable consent requirements.
20. THIRD-PARTY WEBSITES AND SERVICES
Our website or communications may contain links to websites, applications, payment systems, booking services, social media platforms, or other resources operated by third parties.
Those third parties may process Personal Data under their own privacy policies and are responsible for their own processing activities where they act independently of The Camp.
We encourage users to review the applicable privacy information of such third-party services.
21. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when our services, processing activities, technology, or applicable legal requirements change.
When material changes are made, we will update the effective date and provide additional notice where required by applicable law.
Where processing requires consent, a change to this Policy will not by itself create valid consent for a materially different purpose where new consent is legally required.
22. CONTACT AND COMPLAINTS
Questions, requests, or complaints concerning this Privacy Policy or our handling of Personal Data may be directed to:
The Camp Chiangmai Co., Ltd.
417 Moo 12, Nong Khwai, Hang Dong
Chiang Mai Province
Thailand 50230
Email: info@thecamp-chiangmai.com
If you believe your Personal Data rights have been infringed and the matter cannot be satisfactorily resolved with us, you may have the right to lodge a complaint with the competent authority under Thailand's Personal Data Protection Act.
Last updated: 24 August 2026