Last updated: 2 October 2026
TDAC.info is a paid, independent filing service for the Thailand Digital Arrival Card (TDAC). This policy describes the personal data we collect when you read our guides or use our filing service, why we collect it, who processes it for us, and how long we keep it. It is written for the site as it works today, not from a template.
Who we are
TDAC.info is operated by TDAC Digital Services, 22 St Mary's Close, Lowdham, Nottingham, England, NG14 7FJ, which is the data controller for the personal data described in this policy. Contact: support@tdac.info. We are not affiliated with the Thai Government. The government portal at tdac.immigration.go.th has its own privacy policy.
What we collect and why
- Filing data you enter in our form: passport details (name, passport number, nationality, date of birth, expiry date), contact details (email, phone), travel details (flight, dates, accommodation in Thailand), purpose of visit and the health and travel-history answers the TDAC form requires. We use this data for one purpose: to prepare and file your TDAC and to send you the resulting QR code.
- Saved drafts: if you leave the form before paying, we keep the data you have entered so you can resume from the link we email you. We may send a reminder email about an unfinished application.
- Payment: payments are handled by an external payment processor. We never see or store full card numbers. We store the processor's transaction reference, the amount and the payment status.
- Contact form: your name, email address and message, used only to answer you.
- Technical data: server logs (IP address, user agent, requested pages) kept for security and error diagnosis, and anonymous error reports from the browser when a page fails.
- Analytics: we use an analytics service to count visits and see which pages and form steps are used. It is not used to identify you.
Who processes your data for us
- Thai Immigration Bureau (tdac.immigration.go.th): we submit the data required by the TDAC form on your behalf. Once filed, that data is held by the Thai authorities under Thai law.
- Payment processor: payment processing.
- Email delivery provider: transactional emails (confirmation, QR code, draft reminders, replies).
- Internal order records: a copy of each order is kept in a private system that our staff use to process applications.
- Hosting and content delivery: our servers in France and a content delivery network that caches public pages.
- Analytics service: usage statistics.
We do not sell personal data, and we do not share it with advertisers or data brokers.
Cookies and local storage
- Language preference: a cookie that remembers the language you chose in the language switcher.
- Analytics cookies: visit statistics.
- Payment cookies: set by the payment processor while the payment buttons are shown, under its own privacy statement.
- Browser storage: the form keeps your in-progress answers in your own browser so a page reload does not lose them.
We do not use advertising cookies.
How long we keep your data
- Orders and filed applications: kept while the application can still be relevant to your trip and for as long as we must keep transaction records for tax and payment-dispute purposes, then deleted.
- Unpaid drafts: kept so that you can resume the application from the link we email you. You can ask us to delete a draft at any time.
- Contact messages: kept for 6 months after our last reply.
- Server logs: rotated automatically and kept only as long as needed for security and error diagnosis.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. We answer within 30 days. Data we must keep by law (payment records) or data already filed with Thai Immigration cannot be deleted by us. To exercise these rights, email support@tdac.info from the address you used with us, or use our Contact page. If you are in the UK or the EU, you also have the right to complain to your data-protection authority.
Security
All pages and forms are served over HTTPS. Filing data is stored in a database that is not reachable from the internet, and access to orders is limited to the staff who process them.
Changes to this policy
When we change what we collect or who processes it, we update this page and the date at the top. Questions about this policy go to our contact page.