Privacy Policy
Last updated: October 6, 2026
This policy explains how Tamarind Motorbike & Tour handles customer information for website use, motorbike booking requests, confirmed rentals, payments, deposits, and identity checks.
Who Is Responsible And How To Contact Us
- Tamarind Motorbike & Tour is responsible for the information described in this notice. Our operating address is Rawai, Mueang Phuket District, Phuket 83130.
- For privacy questions or requests, email tamarindmotorbike@gmail.com, call +66 82 057 7500, or contact us through WhatsApp at +66 82 057 7500.
Information We Collect
- Contact and account details; login and session records; rental dates; delivery or collection details; customer notes; selected bike, model and plate; and quote or legal-acceptance snapshots may be collected for online requests and rentals.
- Staff may record approval, payment, deposit, pickup, return, odometer, fuel, accessories, condition, damage, identity inspection, customer communication, and audit facts for a rental.
- For an agreed external payment, records may include the payment method, amount, currency, transfer reference and staff verification of receipt. We use these details to match the payment to the rental and handle corrections or refunds.
- When document uploads are enabled, we process passport or driver-licence files plus upload, review, replacement, access, and deletion metadata under the Identity Document Policy.
Cookies And The 24-Hour Rental Draft
- Essential cookies support account authentication, security, and the booking flow. We do not use non-essential advertising or session-replay tools at launch.
- Your browser may keep a rental draft for up to 24 hours. It can include dates, bike and hold details, name, phone, email, notes, delivery or collection locations and map links, payment choice, legal acceptance, licence declaration, and a duplicate-submission identifier.
- Expired or invalid rental drafts are removed when the application next reads them. Identity-document images or numbers, payment-card details, and bot-challenge tokens are not stored in this rental draft.
How We Use Information
- Information is used to provide accounts, review and confirm booking requests, collect or reconcile payments, prevent duplicate or abusive submissions, perform handover and return checks, operate the fleet, communicate with customers, and maintain business records.
- Legal, customer, bike, and quote snapshots may be retained as business records even if live account details later change.
- We also use limited records to secure the service, investigate errors or disputes, comply with legal and accounting duties, and protect customers, staff, and the business.
Service Providers And Access
- The service uses Railway-hosted application and PostgreSQL infrastructure, Cloudflare R2-compatible private object storage, Resend or configured SMTP email delivery, and Better Auth software backed by our database. Omise processes online payments and card holds when those services are enabled and offered.
- Depending on enabled features, information may also be processed by Sentry for error reporting, Upstash for rate limiting, Google for optional sign-in, or Cloudflare Turnstile for bot protection.
- When you use a bank transfer, Wise or Revolut arranged with Tamarind, the relevant financial service processes your transfer. Tamarind uses the transfer reference and receipt information to verify and reconcile it; this does not give the booking app access to your financial-service account.
- Authorized Tamarind staff access information for rental operations. Staff-only notes, audit logs, raw storage keys, signed links, security credentials, and provider internals are not public customer data.
Retention, Security, And Your Choices
- We retain rental, payment, accounting, legal-acceptance, audit, and dispute records for as long as reasonably required for those purposes and applicable obligations. Identity-document retention and deletion follow the separate Identity Document Policy. Scheduled retention cleanup and account-deletion cleanup continue independently of access to document uploads. Disabling uploads does not itself delete stored documents.
- Access is restricted by account role and private-storage controls. Security and abuse records use fingerprints instead of raw sensitive values where practical.
- You may ask about your information or request access, correction, or deletion by contacting tamarindmotorbike@gmail.com. Some records must be retained for legal, accounting, security, fraud-prevention, dispute, or operational reasons.