Rules and data

LIME TOUR HUA HIN CO., LTD.

The Lime Tour organisation in Thailand. The company receives service and personal data enquiries through the contacts below. The seller and provider of each service are determined by its offer and may be other organisations.

Sign in through Telegram to see the terms of your issued privileges.

A privilege's terms do not change after it is issued, even if the club updates its rules.

A service's terms are on its page. Your request keeps the version you applied under. The manager will confirm the provider, what is included, the price and timing in a quote.

Submitting a request is free. It does not itself make a booking or a payment. Before accepting a quote, check the seller, price, prepayment and deposit, if any.

Cancellation, refunds, changes and deposit deductions depend on the chosen service's terms and the manager's quote. There is no single free cancellation rule. If anything is unclear, ask in your request before paying.

At sign-in we store your Telegram ID, name, username, language, photo link and permission for the bot to message you. For the card we keep its number, your settings and uploaded photo. A phone number and passport are not needed for the card.

These details support sign-in, the card, requests, service delivery and replies to enquiries. We keep request answers and messages, manager quotes, orders, payments, deposits, refunds and Limes transactions.

DTV has a separate optional form: marital status, cities of birth and passport issue, home and Thai addresses, visa history, other citizenship and tax identification number. A request for the APEC card keeps four answers: your citizenship, what you do, the countries of your trips and when your next trip is. The request does not ask for documents. A Bangkok – Hua Hin transfer request keeps your trip answers and, if you give them, the flight number, the name on the sign and the address. Document files are not uploaded to the app: agree separately how to send them to your manager. Messages and documents outside the app are stored in the channel used.

Staff access is limited by their role and business unit. You can see your DTV draft; once sent, managers of the unit handling your request can also see it. Agree with your manager what details an external provider needs before sharing them.

Your uploaded profile photo can be opened through a direct public link. After removal or replacement, a cached copy may remain for up to a day; failed deletions are retried.

“Telegram messages” and “Club offers” are two separate choices in Settings. Your card and purchases work without them too.

The sign-in cookie lasts up to 7 days; language and theme cookies last up to a year. Your device also stores the chosen city and temporary launch and analytics session identifiers. These help the app continue working.

When analytics is enabled, collection is on by default. PostHog Cloud in the US has been selected: it receives actions, entry sources, services, request stages and transaction amounts under a pseudonym — an internal member identifier. This is not anonymous data. These events do not include your Telegram ID, name, contacts, message text or DTV form answers.

You can turn analytics off in Settings. This stops new optional collection and cancels pending delivery, but does not delete events already sent. Contact the company to request deletion; an operator checks the result at PostHog separately.

In an ordinary browser without signing in, the pixels of Meta Platforms, Inc. (USA) and VK LLC (Russia) run. They are on the public pages: the service catalog, ad landing pages, Help and this one. The pixels receive the page address, your IP address and browser details, and these events: a page viewed, a form opened, a request draft created and a manager's chat opened. They do not receive your answers, name or Telegram ID. On your device they keep Meta's _fbp and _fbc and VK's tmr_* cookies; your choice is kept for 180 days in the mylime_ads cookie.

While ads are allowed, our server sends Meta details of every new request draft: the page address, your IP address, browser details and Meta's cookies if present. When you press a chat button, Meta gets the same without your IP address. If the draft had a Meta cookie or a click on a Meta ad, Meta also learns about the request sent and payments, with the amount in baht. VK learns from our server only about the request, payments without the amount and chat button presses, if you came from a VK ad. With requests and payments Meta receives a hash of the member's internal pseudonym. The server never sends your Telegram ID, name or answers.

You choose in the notice on the page and can change it with “Change ad choice”. Refusing stops the pixels and removes their cookies on this device. A member can also turn off analytics in Settings, which stops the server's ad events too. Meta and VK do not delete what they have already received.

Under Thailand's PDPA, you may request access and a copy, correction, deletion, restriction of processing, object to processing and request data portability where applicable. You may withdraw consent when processing relies on it. These rights may be subject to legal limits.

Email the company or use Help in the app. Explain which data and action your request concerns. To protect your data, the company may verify your identity. Requests are handled manually; there is no automatic deletion of the whole account.

General retention periods for profiles, requests, messages, financial records, analytics and backups have not yet been set. The periods for individual records below do not mean that all data is deleted. Ask the company about your data's retention or request deletion; records required by law may be kept.

The DTV form is deleted during a cleanup after 30 days from request closure, or when the card is closed. The current stay expiry record is removed during a cleanup after 30 days from that date; the date itself may remain in the change history. These rules do not cover files and messages shared outside the app or set retention periods for the history or backups.

If you believe your data rights have been infringed, you may complain to Thailand's personal data protection authority — the PDPC.