Privacy Policy

Privacy Policy – Trip Dust

Last Updated: 6 November 2026

1. Introduction

Welcome to Trip Dust (“Company”, “we”, “our”, or “us”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website https://tripdust.com and use our travel services.

2. Information We Collect

We may collect the following types of personal data:

Identity Data: Full name, nationality, passport information
Contact Data: Email address, phone number, WhatsApp number, physical address
Travel Data: Travel preferences, destination interest, hotel requirements
Payment Data: Payment method and billing address (processed securely via third-party gateways)
Technical Data: IP address, browser type, device type, browsing behavior

3. How We Collect Your Data

We collect data through:

Booking and inquiry forms
WhatsApp and email communications
Website analytics tools
Cookies and similar technologies

4. How We Use Your Data

We use your personal information to:

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Process bookings and travel service requests
Communicate with you via WhatsApp, phone, or email
Send booking confirmations, invoices, and itinerary updates
Provide customer support before, during, and after your trip
Improve our website, services, and marketing

5. Sharing Your Information

We may share your information with:

Service partners: such as hotels, transport providers, and activity operators
Payment processors and booking platforms
Legal authorities where required by law

All third parties are obligated to keep your data confidential and use it only for service-related purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your data. While no system is 100% secure, we take every reasonable precaution to prevent unauthorized access or misuse.

7. Your Rights

You have the right to:

Request access to your personal data
Correct or update your information
Withdraw consent for marketing communications
Request deletion of your data where legally applicable

To exercise your rights, contact us at service@tripdust.com.

8. Cookies Policy

Our website uses cookies to:

Enhance user experience
Analyze website traffic
Track marketing performance

You can manage your cookie preferences in your browser settings.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. Please review their policies before sharing your data.

10. International Users

As a company based in Thailand, we process and store data in accordance with Thai privacy regulations and international standards.

11. Changes to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page with an updated revision date.

Trip Dust app: how long we keep your data

Data	How long we keep it
Your account (name, phone, email, country)	Until you delete your account. Accounts with no sign-in and no booking for 36 months are anonymised; anonymised accounts are erased 30 days later.
Booking records (reference, dates, amounts, payment status, notes our team wrote on the booking)	5 years after the travel date, as Thai accounting law requires, then deleted.
Contact, pickup and traveller details on a booking	Removed 12 months after the travel date (or when you delete your account, after an upcoming trip is over).
First names of friends who pay a share of a split booking, and the organiser’s first name shown to them	Removed together with the booking’s contact details: 12 months after the travel date, or when the organiser deletes their account. Friends pay on Razorpay’s or Stripe’s own page; we keep only the first name they type and the payment record.
Our suppliers’ replies about a booking (the supplier’s name and the reason they give)	Removed together with the booking’s contact details, 12 months after the travel date.
Gift card names and message (typed by the buyer)	Cleared 12 months after the card is opened, expires, is refunded or is switched off. The gift card and its payment record are kept 5 years after the card ended, as Thai accounting law requires, then deleted.
Trip Dust credit history (gift cards opened, invite rewards, credit used or given back)	Kept for our accounts. When you delete your account the history is kept without your name, and any unspent credit is lost.
Supplier portal sign-in (a supplier’s name and email address)	Kept while our team gives that supplier access; deleted 12 months after the access is switched off, if nothing changes in that time. A sign-in link works once and is stored only as a one-way check value.
Bookings copied to our team’s Google Sheet (only while that export is switched on)	Each copy replaces the one before and holds only recent and upcoming bookings. When our team stops the export it empties the sheet; Google keeps earlier versions in the sheet’s version history under Google’s own policies.
Requests and enquiries	Personal details removed 12 months after the request (notes our team wrote on it stay with the record); the record is deleted after 5 years.
Login codes	The phone number until the code is used, or at the latest about an hour after it expires (a code works for 5 minutes); the record itself after 24 hours.
Codes that confirm your email address	The code works for 10 minutes and is stored only as a one-way check value; the record, with the email address, is deleted after 24 hours.
Reviews and their photos	A published review stays public with your first name until you ask us to remove it, also after you delete your account. Reviews not yet published are deleted with your account. Photos you upload but never send with a review are deleted after 24 hours.
Reports of reviews	Kept until our team has handled them, then deleted 12 months later.
Your past tripdust.com orders shown in the app	The app server keeps a copy of tripdust.com orders, including the phone number and email address used on each order, so they can be matched to an app account. An order is linked to your account only through a checked phone number or a confirmed email address (see below). Kept 5 years after the order was placed, as Thai accounting law requires; deleting your app account only unlinks them.
WhatsApp chats with our team stored on the app server (messages you send to our WhatsApp number are copied there from the team inbox on our website, only while that copy is switched on)	Until you delete your app account; they are deleted with it. The chats of a number with no app account are kept until you ask us to delete them.
Notifications in the app	90 days.
Searches in the app that found nothing	Only the words searched, to improve search — never who searched them, their device or internet address. Deleted after 30 days when searched once, otherwise 180 days after the last search.
Payment notifications from Razorpay / Stripe	Kept 5 years with the booking; the provider message itself is deleted after 180 days.
Notification tokens of your devices	Until you log out, or after 270 days without use.
Delivery records of our booking messages (where a message went and whether it arrived)	180 days.
Server logs	Deleted as newer logs take their place. The logs have a fixed size, so how long an entry stays depends on how busy the app is.
Backups	Deleted data can remain in our backups for at most 8 weeks before they roll over.

Reviews and photos

After a trip you can review it in the app: a star rating, your text and up to 3 photos. Our team reads every review before it is published. A published review shows your first name, the city of the trip, the date and a “Verified booking” label; it never shows your phone number, email address or booking reference. Before a photo is stored, its location and camera data are removed.

Anyone can report a review in the app (Report review), and our team checks reports within 24 hours against our review guidelines. A report keeps the reason you chose and your optional note. When you are signed in it is linked to your account; when you are not, we keep only a one-way code made from your internet address and device, so the same review is not reported twice by the same person. You can also hide a traveller’s reviews; that list stays on your phone.

Your past tripdust.com bookings

If you booked on tripdust.com, the app can show those orders: the order number, date, status, items and total. An order is linked to your account only when its phone number is one you confirmed with a login code, or its email address is one you confirmed with a 6-digit code sent by email (or that Google or Apple confirmed when you signed in with them). Addresses from Apple’s Hide My Email never match. Our team can also link or unlink an order by hand, for example when you ask us to.

Videos

Some activities have a short video. On Wi-Fi the app shows its preview picture from YouTube. The video loads only when you tap it, in YouTube’s privacy-enhanced player (youtube-nocookie.com); Google may set cookies once a video is played, under Google’s own privacy policy.

Who processes your data for us

Google (Firebase): sign-in, app security checks, push notifications and usage analytics without the advertising ID. Usage analytics include an approximate location that Google works out from your internet address — never your precise location.
Meta (WhatsApp Business) and Twilio: login codes and booking messages.
Razorpay and Stripe: card and UPI payments; your card details go to them directly and never reach Trip Dust.
Our email provider: booking confirmations, receipts and the codes that confirm your email address.
Sentry: crash reports, with personal details removed.
Hostinger: server hosting, Malaysia.
YouTube (Google): video player.
Google (Google Sheets): only when our team switches the export on, the booking details the team works with (booking reference, activity, date, travellers, pickup hotel and room, pickup time, amount, booking status and notes, and — unless the team turns it off — the guest’s name and WhatsApp number) are copied to the team’s own Google Sheet for daily operations.

Where the app server is

The Trip Dust app server and its database are hosted by Hostinger in Malaysia.

Deleting your account

In the app: More → Account → Delete my account; the deletion runs straight away. Without the app: https://api.tripdust.com/delete-account; our team runs the same deletion within 7 days of your request.

Deleted within 24 hours

Your profile: name, phone number, email address and country.
Your sign-in (Google, Apple, WhatsApp or phone number) and every device registered for notifications.
Sign-in codes, one-tap WhatsApp links and any technical duplicates of your requests.
Codes sent to confirm your email address.
Your wishlist, app notifications and the WhatsApp chats with our team stored on the app server.
The link to your account and your note on any review you reported.
Personal details inside your enquiries and Trip Builder drafts (names, hotels, contact details are replaced with “[redacted]”). Notes our team wrote on an enquiry are kept with it.
Your bookings, vouchers, profile and drafts saved by the app on your phone (cleared when the app signs you out; app settings such as the display currency stay until you uninstall the app).

What we keep

Booking and payment records are kept for 5 years as required by Thai accounting law — the reference, dates, items, amounts and payment status, and any notes our team wrote on the booking. Your name, phone, email, hotel and room are removed from them, apart from anything our team typed into such a note.
One exception: for a booking that is confirmed for an upcoming date, your name and pickup hotel stay on that booking until the trip ends, so the driver or guide can still meet you. They are removed right after.
Your Trip Dust credit history is kept for our accounts without your name. Any unspent credit is lost.
Reviews you published stay public with your first name only, together with their photos. Reviews not yet published are deleted. Email service@tripdust.com if you want a published review removed.
Orders you placed on tripdust.com stay in the website’s own records. The app server’s copy of them, which includes the phone number and email address used on each order, is kept 5 years after the order was placed; deleting your app account only unlinks them.
The emptied account record, with no name, phone number or email address, is erased 30 days later.
Delivery records of our booking messages (the phone number or email address a message went to, and whether it arrived) are deleted 180 days after the message was sent.
Payment providers (Razorpay, Stripe) keep their own transaction records under their policies.
Backups can hold deleted data for at most 8 weeks before they are rotated out.

12. Contact Us

If you have questions or concerns about this policy, please contact us:

Email: service@tripdust.com
Phone/WhatsApp: +66 82 885 5990
Website: https://tripdust.com

13. Promotions

All special promotions are valid for a duration ranging from 3 months to 3 years, as specified per individual offer. The Company reserves the exclusive right to modify, extend, or terminate the duration of any promotion at its sole discretion and without prior notice.

Thank you for trusting Trip Dust with your travel needs.