Privacy policy

hotelkhaolak.com is an independent guide to Khao Lak and the Andaman coast. We are a publisher. You cannot buy anything here, you cannot create an account, and we never see your payment details — bookings complete on the merchant’s own site.

That keeps the picture simple: we hold almost nothing about you. The parts worth reading carefully are the third-party scripts, because those are not ours and they behave in ways the cookie banner does not fully control.

Google Analytics 4 loads when the page does. It sets cookies named _ga and _ga_0VL2P0NC02, which let Google’s analytics recognise a returning browser. This happens for every visitor, including visitors in the EU, the UK and Thailand, and it happens before the banner is answered. We use it to see which articles are read and which are not.

The Travelpayouts tag (loaded from tp-em.com) also runs at page load. It belongs to the affiliate network that pays us, and it is capable of modifying outbound links and reading the page. On our own measurements it is not currently doing either, but we cannot promise that on a script we do not control.

What the banner does control: Google AdSense, and the flight-search widget on our flights page. Neither loads unless you accept. (It used to also cover our hotel-search widgets; those were removed in August 2026 after the partner behind them closed.) Your choice is stored in your own browser, under cmp_decision, and you can clear it at any time by clearing this site’s data.

If you decline and want the two ungated scripts gone as well, a content blocker will do it, and the site will work normally without them.

Every booking link on this site passes through a redirect on our own domain, which adds the partner ID that tells the merchant we sent you. When that happens we record the time, which partner, which product, and which page you came from.

We do not attach your name, email address or IP address to that record, and we could not identify you from it. We keep it because it is the only way to tell which pages are worth writing more of. See our affiliate disclosure for how the commission side works.

Google receives analytics events through Analytics 4, and would serve advertising through AdSense if you accept it. Travelpayouts and the merchants we link to — hotels, tour operators, transfer companies — receive you as a referred visitor when you follow a link, along with the partner ID identifying us as the referrer. Cloudflare sits in front of this site and processes requests in order to serve it.

Once you land on a merchant’s site you are on their property, under their privacy policy, not ours. We have no visibility into what you do there beyond eventually being told a booking happened.

If you are in the EU or UK, the GDPR gives you the right to ask what we hold about you, to have it corrected or deleted, and to object to how it is used. If you are in Thailand, the PDPA gives you comparable rights. You can exercise them by writing to [email protected].

In practice we hold very little that could be about you: no account, no contact details unless you sent them to us, and click records that carry no identifier. Requests about the analytics data Google holds are usually best directed to Google, but write to us and we will help.

You can also complain to your data protection authority — in the UK the ICO, in the EU your national regulator, in Thailand the PDPC.

Changes

When what we do changes, this page changes with it and the review date at the top moves. We do not quietly broaden it. This is a plain-language policy written to be read, not a document designed to be skipped — if any of it is unclear, that is a fault worth telling us about.