Effective date: 14 July 2026 · Last updated: 14 July 2026
Lennam respects your privacy and is committed to handling personal data fairly, responsibly and transparently.
This Privacy Policy explains how Lennam collects, uses, stores, shares and protects personal data when you visit our website, use our booking platform, communicate with us or book a private boat journey or related service.
By using Lennam, you acknowledge the practices described in this Privacy Policy.
Lennam operates a digital marketplace through which customers may discover, compare and book private boat journeys, transfers, charters and related marine experiences offered by independent boat owners, captains and charter operators.
In this Privacy Policy, “Lennam,” “we,” “us” and “our” refer to the legal entity operating the Lennam platform, available on request. “Platform” refers to the Lennam website, booking interface, customer account features, communications services and related digital tools. “Customer” refers to a person who browses, requests or completes a booking. “Passenger” refers to any person included in a booking. “Operator” refers to the independent captain, boat owner or charter business responsible for performing a booked journey. “Personal data” means information relating to an identified or identifiable individual.
Lennam ordinarily acts as the controller of personal data collected through the Platform. An independent Operator may also process certain passenger information for the separate purpose of performing a booking, complying with law, maintaining safety records or responding to an incident.
This Privacy Policy applies when you visit Lennam’s website, create or use an account, browse boats or destinations, request or complete a booking, make a payment, contact customer support, communicate with us by email, telephone, SMS, LINE, WhatsApp or social media, submit a review, report an incident, respond to a survey or otherwise interact with Lennam.
This Privacy Policy does not govern the independent privacy practices of a third-party business where Lennam merely provides a link or where you purchase a separate service directly from that business.
The personal data we collect depends on how you use Lennam and what is reasonably necessary to provide the requested service.
We may collect your name, preferred name, account username, age or age category where relevant, profile information and other identifying information you choose to provide.
We may collect your email address, telephone number, billing address, preferred contact method, LINE or WhatsApp contact details and emergency contact information where reasonably required.
When you make or manage a booking, we may collect the booking reference, selected boat or boat category, route, destination, departure point, date, departure time, duration, passenger count, passenger age categories, selected additions, special requests, booking status, cancellation history, refund history, assigned Operator and records of changes to the booking.
Where necessary to perform a booking, we may collect limited information about other Passengers travelling with you. This may include names, age categories, child passenger information, accessibility needs, boarding assistance requirements, life-jacket requirements and other information reasonably necessary for the journey.
We may collect transaction information such as the amount charged, currency, booking price, customer booking fee, payment status, payment method, transaction identifier, refund amount, billing information, payment timestamps, chargeback information and limited payment instrument details such as the card type and last four digits.
Complete payment-card numbers and security codes are ordinarily collected directly by Stripe or another authorised payment provider rather than stored by Lennam.
If you create an account, we may collect your login information, encrypted password credentials, booking history, saved preferences, language, currency preference, account settings, communication settings and account-security records.
When you use the Platform, we may automatically collect technical information including your internet protocol address, device type, browser type, operating system, language setting, session identifier, referring page, pages viewed, buttons selected, date and time of access, approximate location derived from your internet protocol address, application performance information, security logs and error information.
Where you grant permission, we may process your approximate or precise device location to help identify a departure point, provide directions, display nearby options or assist with a confirmed booking. You may usually control device-location permissions through your browser or device settings.
We may retain communications you send to Lennam through email, telephone, website forms, customer-support tools, SMS, LINE, WhatsApp, social media or another approved channel. These records may include message content, attachments, timestamps, delivery information and the identity of the participants.
If you submit a review, photograph, video, comment or other content, we may collect and publish that content in accordance with your instructions, our Terms of Service and applicable law.
We may collect marketing preferences, newsletter subscriptions, promotional-code use, campaign interactions, email opens, link selections, advertising identifiers and information concerning how you arrived at the Platform.
We may also collect information relating to suspected fraud, failed login attempts, payment disputes, chargebacks, misuse of the Platform, security incidents, complaints and conduct that may threaten customers, Operators, Lennam or another person.
A Customer may provide personal data about other Passengers included in the booking.
When you provide another person’s information, you confirm that the information is accurate, relevant to the booking and supplied with appropriate authority.
You should provide only the information reasonably necessary to arrange and perform the journey. You should inform the Passenger that their information will be processed by Lennam and may be shared with the relevant Operator.
Where information concerns a child, it must be provided by or with the authority of a parent, guardian or responsible accompanying adult.
Marine travel may require limited information about a Passenger’s mobility, accessibility or ability to board safely.
We may collect information concerning the need for boarding assistance, mobility equipment, life-jacket requirements, difficulty walking on sand or pontoons, inability to swim or another circumstance that may materially affect safe participation.
Some information supplied for safety or accessibility purposes may be considered sensitive personal data under applicable law.
We request that Customers provide only what is reasonably necessary. A functional explanation such as “requires assistance stepping onto a moving boat” is ordinarily more useful and less intrusive than an extensive medical history.
Lennam does not use health, disability or accessibility information for advertising.
We collect personal data directly from you when you provide it through the Platform, make a booking, create an account, communicate with us, submit a review or complete a payment.
We may receive information from the person making a booking on your behalf, from the Operator assigned to your booking, from payment providers, mapping services, communications providers, advertising platforms, fraud-prevention providers, referral partners or other service providers involved in operating Lennam.
We may also collect information automatically through cookies, pixels, local storage, software development kits, server logs and similar technologies.
Where lawful and relevant, we may receive information from banks, card issuers, consumer-protection bodies, regulators, emergency services, law-enforcement authorities or publicly available sources.
We use personal data to operate the Platform, create and manage accounts, display relevant boats and destinations, process searches, remember preferences and provide customer-facing features.
We use booking information to check availability, match Customers with Operators, confirm passenger numbers, reserve boats, administer payments, issue Booking confirmations, provide departure instructions, manage changes, process cancellations, arrange refunds and coordinate the delivery of the Trip.
We use contact information to send payment notices, Booking confirmations, departure details, safety information, Operator assignment messages, route changes, weather-related updates, cancellation notices, refund information, customer-support responses, security alerts and other service communications.
We use transaction information to create payment sessions, confirm payment, calculate fees, prevent duplicate charges, reconcile transactions, administer refunds, respond to chargebacks, detect fraud and comply with financial recordkeeping obligations.
We may use limited safety and accessibility information to assess whether a selected Trip appears suitable, identify an appropriate boat, communicate essential requirements to the relevant Operator, arrange appropriate safety equipment, assist with boarding arrangements, coordinate emergency support or investigate an incident.
We use customer-support information to answer questions, locate Bookings, correct errors, investigate complaints, mediate disputes, review incidents, administer refunds and maintain records of resolutions.
We may use technical and usage information to maintain Platform security, detect errors, prevent fraud, understand how customers use Lennam, improve the booking process, correct inaccurate information, test features and improve the reliability and accessibility of the Platform.
We may use your preferences and past Platform activity to remember your language, currency, departure area, recently viewed Trips and other settings that reduce repeated data entry.
Where permitted by law, we may use contact and engagement information to send destination information, route announcements, seasonal offers, company news or other marketing communications. You may opt out of direct marketing at any time.
We may use personal data to enforce our Terms of Service, prevent fee avoidance, protect customers and Operators, investigate abusive or unlawful conduct, establish or defend legal claims and comply with lawful requests.
We may also process personal data to comply with applicable accounting, taxation, consumer-protection, payment, data-protection, maritime, safety, digital-platform and other legal obligations.
Depending on the circumstances, Lennam may process personal data because it is necessary to enter into or perform a contract with you. This includes processing required to provide a quotation, check availability, create a booking, collect payment, provide departure information, administer a cancellation or issue a refund.
We may process personal data where necessary to comply with a legal obligation, including accounting, tax, consumer-protection, payment, safety, regulatory and data-protection obligations.
Where permitted by law, we may rely on legitimate interests to operate and improve the Platform, prevent fraud, secure accounts, investigate complaints, administer disputes, measure service quality, protect legal rights and communicate with existing customers about closely related services.
We may rely on your consent for optional marketing, non-essential cookies, precise device location, certain promotional uses of photographs, sensitive personal data where consent is required and other optional processing activities.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not invalidate processing already lawfully completed.
In an urgent situation, we may process or disclose personal data where reasonably necessary to protect the life, health or physical safety of a Customer, Passenger, Operator or another person.
We may also process relevant personal data where necessary to establish, exercise or defend a legal claim.
Lennam’s booking services are intended to be purchased and managed by adults.
We may process limited information about children included in a booking, such as their name, age or age category, passenger status, life-jacket requirements, accessibility needs and other information reasonably necessary for the Trip.
A parent, guardian or responsible adult must provide or authorise this information.
Lennam does not knowingly permit children to create independent booking accounts, complete payments or subscribe directly to marketing.
We do not knowingly use children’s personal data for behavioural advertising.
Where Lennam becomes aware that a child’s personal data was collected without appropriate authorisation, we may delete, restrict or otherwise appropriately handle that information.
Lennam may use automated rules to assist with availability checks, route compatibility, passenger-capacity checks, price calculation, fraud screening, duplicate-booking prevention, payment-risk assessment, search ranking and matching a Booking with an available Operator.
Prices may vary according to the route, departure point, boat type, duration, date, season, passenger count, availability and selected additions.
Lennam does not intend to make solely automated decisions that produce significant legal effects without appropriate safeguards.
Where required by law, you may request human review of a decision that materially affects you.
Lennam may use cookies, pixels, local storage, server logs, software development kits and similar technologies.
Essential technologies may be used to maintain Platform security, keep you signed in, remember a Booking, process checkout, prevent fraud, save consent choices and provide core features.
Preference technologies may be used to remember language, currency, departure area, display settings and other choices.
Analytics technologies may be used to measure visitor numbers, understand how pages are used, identify errors, analyse Booking paths and improve Platform performance.
Advertising technologies may be used, where permitted, to measure campaigns, understand referral sources, limit repeated advertising, attribute Bookings to campaigns and display relevant promotions.
Where required by law, non-essential cookies and similar technologies will not be activated until you provide consent.
You should be able to manage non-essential technologies through Lennam’s cookie-preference tool or through your browser and device settings.
Disabling certain technologies may affect Platform functionality, personalisation or the ability to measure performance.
Where permitted by law, Lennam may send marketing communications by email, SMS, LINE, WhatsApp, push notification, social media or another approved channel.
Marketing may include destination guides, new routes, seasonal availability, promotional offers and news about Lennam.
You may opt out at any time by using an unsubscribe link, changing your account preferences, adjusting the settings of the relevant communications platform or contacting Lennam.
Opting out of marketing does not prevent Lennam from sending essential Booking, payment, safety, security, legal or customer-service communications.
Lennam does not sell personal data.
We may share personal data with the independent Operator assigned to your Booking where necessary to perform the Trip.
Information shared with the Operator may include the Customer’s name, contact information, passenger count, passenger age categories, route, departure instructions, special requests, limited accessibility or safety information, Booking status and payment confirmation.
Operators are expected to use this information only for the Booking, safety, legal compliance or another lawful and necessary purpose. They should not use passenger information for unrelated marketing without obtaining an independent lawful basis.
We may share transaction and Booking information with Stripe, banks, card networks, PromptPay participants and other payment providers involved in processing payments, issuing refunds, preventing fraud or administering disputes.
We may share personal data with technology providers that support application hosting, cloud storage, databases, account authentication, email delivery, customer support, analytics, fraud prevention, monitoring, error reporting, cybersecurity, backups and Platform development.
We may share limited technical, search or location information with mapping providers such as Mapbox or Google Maps where necessary to display departure points, route previews, search results or directions.
We may share contact and message information with providers supporting email, SMS, telephone, LINE, WhatsApp, push notifications or customer-support communications.
Where permitted by law and subject to your choices, we may share limited technical, advertising and campaign information with Meta and other analytics or advertising providers.
We do not intentionally share health, disability, accessibility or other sensitive passenger information with advertising providers.
We may disclose relevant personal data to lawyers, accountants, auditors, insurers, claims handlers, consultants and other professional advisers where reasonably necessary.
We may disclose information to police, marine authorities, emergency services, courts, regulators, tax authorities, consumer-protection bodies or other public authorities where required or permitted by law.
If Lennam is involved in an investment, merger, acquisition, financing, restructuring, sale or transfer of assets, personal data may be disclosed to relevant advisers, investors, lenders or prospective purchasers subject to appropriate confidentiality and legal protections.
Some third parties process personal data under their own privacy policies and may act as independent controllers for certain purposes.
These may include Operators, Stripe, banks, PromptPay participants, Mapbox, Google, Meta, LINE, WhatsApp, Apple, card networks and independent activity providers.
Lennam is not responsible for processing performed independently by a third party outside Lennam’s instructions or control.
Customers should review the privacy information of relevant third parties where appropriate.
Some of Lennam’s technology, payment, communications, mapping, analytics or support providers may process or store personal data outside Thailand.
The laws of those countries may differ from Thailand’s data-protection laws.
Where personal data is transferred internationally, Lennam will take measures required by applicable law. These may include selecting providers with appropriate safeguards, using contractual data-protection provisions, restricting access, applying encryption, relying on recognised transfer mechanisms or obtaining consent where legally appropriate.
Lennam uses reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These safeguards may include encryption in transit, encryption at rest where supported, access controls, role-based permissions, password protection, multi-factor authentication for administrative access, secure payment processing, logging, monitoring, restricted access to sensitive information, backups, incident-response procedures and provider review.
No website, application, payment system or data-storage environment can guarantee absolute security.
You are responsible for keeping your account credentials confidential and notifying Lennam promptly if you suspect unauthorised access to your account or Booking information.
Where Lennam becomes aware of a personal data breach, we will investigate the incident, take reasonable steps to contain it, assess the likely consequences and preserve appropriate records.
We will notify the relevant authority and affected individuals where required by applicable law.
Where an individual notification is required, it may describe the nature of the incident, the types of information affected, the likely consequences and reasonable steps the individual may take to protect themselves.
Lennam retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, fraud-prevention, safety, insurance and dispute-resolution requirements.
Incomplete Booking information may be retained for a limited period to provide customer support, understand abandoned Bookings and prevent fraud.
Customer account information may be retained for the life of the account and for a reasonable period after closure.
Booking and transaction records may ordinarily be retained for between five and ten years where necessary for accounting, tax, consumer disputes, payment matters or legal compliance.
Customer-support records may ordinarily be retained for between three and five years, depending on the nature of the enquiry.
Complaint, incident and insurance-related records may be retained for a longer period where a claim, investigation or legal obligation remains possible.
Safety and accessibility information will be retained only for as long as reasonably necessary for the Booking, incident response, legal claim or other lawful purpose.
Marketing information may be retained until consent is withdrawn, an objection is made or the information is no longer reasonably useful.
Fraud and security records may be retained for as long as reasonably necessary to protect the Platform and its users.
Where information is no longer required, Lennam will delete, anonymise or securely restrict it where reasonably practicable.
Subject to applicable law and relevant exceptions, you may have the right to request access to personal data held about you.
You may have the right to request a copy of your personal data, correction of inaccurate information, completion of incomplete information, deletion, destruction, anonymisation or restriction of processing.
You may have the right to object to certain processing, including direct marketing and processing based on particular legitimate interests.
Where processing is based on consent, you may withdraw that consent.
Where legally applicable, you may have the right to request data portability in a structured, commonly used and machine-readable format.
You may have the right to request information concerning the source of personal data not collected directly from you and to request review of certain automated decisions.
You may also have the right to lodge a complaint with the competent data-protection authority and seek another remedy available under law.
These rights are not absolute. Lennam may retain or continue processing information where necessary to complete a contract, comply with law, protect safety, prevent fraud, maintain financial records, establish or defend legal claims or satisfy another lawful exception.
To make a privacy request, contact Lennam at lennamboats@gmail.com.
Your request should include your full name, the email address or telephone number associated with your account or Booking, the nature of your request, any relevant Booking reference and sufficient information to identify the data concerned.
Lennam may request reasonable identity verification before disclosing, correcting or deleting personal data.
We will respond within the period required by applicable law.
Lennam ordinarily will not charge for a reasonable privacy request. Where permitted by law, a reasonable fee may be charged or a request may be refused if it is manifestly unfounded, excessive or repetitive.
You may be able to update certain account information directly through the Platform.
Other corrections may be requested through customer support.
Some Booking and transaction records cannot be altered after completion where they must be retained for accounting, payment, safety, fraud-prevention or legal purposes.
Where a historical record cannot be changed, Lennam may retain an additional note explaining the correction or dispute.
Where Lennam relies on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing completed before consent was withdrawn.
Withdrawal may affect optional features. Disabling precise location may prevent location-based functions. Withdrawing marketing consent will stop promotional communications. Refusing non-essential cookies may limit personalisation or analytics.
Where limited safety information is genuinely necessary to determine whether a Trip can be provided safely, declining to provide that information may prevent Lennam or the Operator from confirming the Booking.
You may request closure of your Lennam account by contacting customer support.
Closing an account does not require Lennam to delete information that must reasonably be retained for completed Bookings, payment records, tax, accounting, fraud prevention, consumer disputes, incident investigation, legal claims or regulatory compliance.
Information no longer required will be deleted, anonymised or restricted according to Lennam’s retention practices.
Reviews, usernames, photographs or comments published publicly may be visible to other users and may be indexed by search engines.
You should not publish passport details, payment information, private telephone numbers, home addresses, medical information or confidential information about another person.
Lennam may remove public content that creates a privacy, safety, fraud or legal risk.
Submitting content does not authorise Lennam to use an identifiable photograph of you or a child prominently in advertising unless Lennam has an appropriate legal basis and obtains consent where required.
Lennam may use mapping and location information to show departure points, destination areas, directions, nearby options or approximate route information.
A Customer’s precise device location will ordinarily be processed only where permission has been granted and the function requires it.
For confirmed Bookings, Lennam may share the departure point and limited location information necessary to coordinate the Trip.
Lennam does not intend to use precise location information to create sensitive advertising profiles.
Public maps should show approved departure locations or relevant operating areas rather than a captain’s private residence or unrestricted live position.
The Platform may contain links to third-party websites, applications or services.
Lennam does not control those services, and this Privacy Policy does not govern their independent practices.
You should review the relevant privacy policy before providing personal data directly to another business or service.
If Lennam undergoes a merger, acquisition, financing, restructuring, investment, sale or transfer of assets, personal data may be transferred or disclosed as part of that transaction.
Any recipient will be required to handle the information in accordance with applicable law and any continuing commitments made in this Privacy Policy.
Lennam will provide notice where required.
Lennam may update this Privacy Policy to reflect changes in law, regulation, Platform features, payment methods, service providers, communications tools, mapping services, data practices, security measures or business operations.
The revised version will display an updated effective date.
Where a change materially affects your rights or the way your personal data is used, Lennam will provide additional notice where required by law.
Privacy questions or concerns should first be sent to Lennam at lennamboats@gmail.com.
Lennam will seek to investigate and resolve the matter fairly.
You may also have the right to submit a complaint to Thailand’s Personal Data Protection Committee or another competent authority.
For privacy questions, requests or complaints, contact Lennam at lennamboats@gmail.com.
Lennam’s full legal entity name is available on request from Lennam.
Lennam’s registered address is available on request from Lennam.
Lennam’s business registration number is available on request from Lennam.
Lennam’s Thai business telephone number is available on request from Lennam.
Lennam’s privacy contact is available by emailing the address above.