MyThaiOnline
Registration

Consent to the Processing of Personal Data

Revised on October 24, 2026. This is a separate consent document under Article 9, Part 1 of Federal Law No. 152-FZ of the Russian Federation, as amended by Federal Law No. 156-FZ. Reading it does not in itself constitute consent; the conditions for analytics and widgets are set out below.

I voluntarily and knowingly give specific, informed, unequivocal consent, for the stated purposes, to MyThai Online Co., Ltd. (บริษัท มายไทย ออนไลน์ จำกัด), registration No. 0775569002174, address: 551/1 Moo 7, Hin Lek Fai, Hua Hin, Prachuap Khiri Khan 77110, Thailand, email info@mythai.online, to process my data only for the purposes listed and subject to the conditions specified for each:

  • Registration and selected sign-in: When I check the box for registration or social sign-in, the data processed are my name, email, username, password hash or identifier, and profile data I authorize Google, VKontakte, Odnoklassniki, Yandex, Mail.ru, or Telegram to share; the purpose is to create and maintain my account. The profile is retained until I request its deletion.
  • Comments: When I register to comment and submit a comment, the data processed are my name, email, IP address, browser, message text, and timestamp; the purpose is to publish the comment and associate it with its author. My name and text will be visible to readers. The data are retained while the comment remains published, and I may request its deletion. Voluntary publication does not authorize use of my information for other purposes.
  • Reply Notifications: Only if I separately choose to subscribe and confirm my email address: my address and selected discussion; the purpose is to send replies. The data are retained until I unsubscribe.
  • Event Reminders in Telegram: Only when I open the bot myself using the “Remind me on Telegram” button and press “Start”: my Telegram chat ID, event number, and reminder time; the purpose is to send a reminder about the selected event. The data are retained until the reminder is sent, the reminder is canceled, or the event is canceled.
  • Contact Form: If I check the separate form box: my name, email, selected subject, message, consent marker, and technical submission details; the purpose is to receive my message, reply, and address my question. Consent remains in effect until the review and correspondence are complete or I withdraw it.
  • Analytics: When I use the site after the cookie notice, if this group has not been disabled in “Cookie Settings”: cookie identifiers, IP address, device information, referral sources, pages visited, and actions, including Webvisor interaction recordings; the purpose is to measure readership and improve the site. Consent lasts 180 days or until I withdraw it or the version changes.
  • Partner Widgets and Social Networks: When I use the site after the cookie notice, if this group has not been disabled: my IP address, browser, page address, identifiers, and actions within the widget; the purpose is to load the selected features of Tripster, Travelpayouts, Localrent, KiwiTaxi, and Facebook SDK. Consent lasts 180 days or until I withdraw it or the version changes.

The actions permitted for the selected purpose are collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer to necessary recipients, blocking, deletion, and destruction. Processing may be automated or carried out by employees. I do not give general permission for any purposes.

The site and its database are hosted by Bluehost in the United States, pages are delivered by QUIC.cloud via a node in Germany/EU. Service emails are delivered by Brevo (a European service; the specific data centers and subcontractors for our account have not been separately confirmed). The operator’s employees and necessary contractors also receive the data.

When analytics is enabled, the recipients are — Yandex Metrica, Russia, and Google Analytics, United States. With widgets, the recipients are — Tripster, Travelpayouts, Localrent, KiwiTaxi with international infrastructure; the specific countries under each agreement have not been confirmed, and processing in Russia and other countries is possible; Facebook / Meta, United States. For social sign-in, the provider I select is Google (United States), VKontakte, Odnoklassniki, Yandex, Mail.ru (Russia), Telegram (international infrastructure; the specific country has not been confirmed).

Google reCAPTCHA, Google Fonts, and Gravatar / Automattic (United States) receive technical information when the relevant features are used. Gravatar also receives an identifier derived from my email address for the avatar. Their connections may occur separately from the selected cookie groups; this disclosure does not mean the cookie banner blocks all external services on the site.

I understand that a different level of protection may apply in Russia, the United States, and other countries. Using the site with a group enabled after this notice constitutes consent to the transfer described for that group, including for the purposes of Section 28(2) of the PDPA. This does not remove any separate requirements for cross-border transfers and data localization, if applicable.

The checkboxes are unchecked by default. Registration, form submission, and subscriptions each have their own confirmation steps; refusing one purpose does not authorize processing for that purpose through another. The content remains available to read. A form will not be submitted without the data required for that specific form and its consent.

To withdraw my consent, I will write to info@mythai.online with the subject “Withdrawal of Consent,” stating the purpose and my email address or other details that can be used to find my records. I can immediately disable optional groups using the button in the footer. I can unsubscribe from reply notifications using the link in the notification.

After withdrawal, the operator stops processing under this consent and deletes the data within the period established by applicable law, unless another lawful basis for retention applies. Prior lawful processing remains valid. Email logs are currently kept without a defined limit, and the operator is reducing the retention period; withdrawal requires a separate review of related records. Retention required by law, protection of rights, and compliance with lawful requirements may continue on an independent basis.

Details about cookie retention periods, rights, and how to make a request are in the Privacy Policy. This link does not combine the documents; consent is documented separately.