Privacy notice

Affiliate link clicks

We record affiliate redirect times, source pages and destinations, separating bots and internal tests. With analytics consent, we also record encrypted IP addresses, browser User-Agent, inferred device and browser, browser-reported language and time zone, and approximate network country or region. IP addresses do not identify a person and proxies may affect location. Details are retained for up to 90 days and accessible only to authorised administrators. Without consent, these detailed visitor fields are not recorded.

Account and registration information

Email registration stores your email and a password hash. Google sign-in stores your Google identifier, email and name and does not read Gmail. New registrations record the browser User-Agent, inferred device and browser, browser-reported language and time zone, and the optional country or region you provide, for account support and operations. We do not infer country from your time zone or invent missing historical details.

Registration notifications containing your account email and these registration details are sent to the authorised Bangsai administrator for this site’s operations, not other projects’ marketing lists. Information is retained for account support. Use our contact form to request access, correction or deletion. Contact Bangsai

Local saved list

Guest saves live in browser storage. Account saves, trip dates, day arrangements and notes are stored for your account and accessible to you and authorised support administrators when needed. Remove saves or delete trips in your travel space. Browser saves upload only when you choose import.

For privacy questions, contact this site: Contact this site

Collection and use

Enquiries store your email, question, source page, selected recipient and permission to handle the request. Contact details and questions are encrypted in the database. Email registration stores account details and a password hash, never a plain-text password; verification codes expire shortly. Google login stores the account identifier, email and name; it does not read Gmail messages.

Analytics and cookies

This site uses 51LA to automatically measure page visits, referrals and device information. 51LA may use browser identifiers and processes visit data as a third-party provider. Session recording and automatic event tracking are disabled.

Essential session cookies support login and form security. Google Analytics loads automatically to measure page visits, referrals and device information. First-party events exclude email and question text and are retained for 90 days.

Sharing, retention and deletion

Enquiries are handled by this site only and are not forwarded to other projects or added to their marketing lists. Enquiry data is retained for 12 months by default, with active service records handled for their ongoing purpose. Contact the contact form above to request access, correction or deletion.

Partner profiles and travel products

Partner applications store business identity, contact details, service scope, public copy and submitted documents. Review contacts, registered addresses and evidence documents are not shown on public profiles. Public introductions, authorised images and reviewed products are shown to travellers. Applications, edits and reviews retain version and audit records.

Experience analytics and external bookings

Experience impressions, product opens and outbound events require analytics consent and use a random identifier, without email or question text. These raw events are cleaned on a 30-day window; withdrawal stops new events and deletes records linked to that analytics identifier. External sites handle bookings, payments and refunds under their terms. A click does not create a Bangsai order. Authorised administrators use provider reports and payment evidence for separate reconciliation.

Review evidence and platform orders

Review submissions store text, rating, experience date, a booking-reference hash and private evidence. Evidence is accessible only to its author and authorised reviewers, not suppliers. Suppliers may appeal public reviews; authors may withdraw them. Orders retain service terms, amount, departure, quantity and payment/refund references for fulfilment, refunds, reconciliation and disputes. Payment providers process card details; Bangsai does not store full card numbers. Request data access or deletion through our contact form; we explain any transaction records retained for unresolved disputes or necessary records.

Assisted planning and data access

When you choose AI assistance, only public attraction data, day count and pace are sent to the configured AI service—not account email or personal notes. You confirm suggestions before adding them; no purchase occurs. Supplier APIs expose only that supplier’s reviewed, published products, using expiring, rate-limited and revocable keys.