Privacy & Cookie Policy

This site is published under the trading name Running in Thailand. We are the data controller for personal data collected through this website.

Privacy contact: run@runninginthailand.com

• Account data — if you create an account or sign in, we store your email address, your name if you provide one, and authentication identifiers. Sign-in is handled by our hosting and authentication provider.
• Analytics data — pages viewed, approximate location derived from IP, device and browser type, referring site. Collected only if you accept analytics cookies.
• Technical logs — our hosting provider records IP addresses and request details for security, abuse prevention and reliability. This is necessary for the site to operate securely.
• Messages you send us — if you email us, we keep the message and your address so we can reply.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

• Consent — analytics cookies and third-party embedded content. You can withdraw consent at any time via cookie settings.
• Contract — providing your account and the features you sign in for.
• Legitimate interests — keeping the site secure and available, and responding to your enquiries.

We group cookies and local storage into three categories. Optional categories are off until you accept them in the cookie banner.

You can change or withdraw your choices at any time using cookie settings, or by clearing cookies in your browser.

We rely on a small number of service providers to run the site. They process data on our behalf, or as independent controllers for the content they serve:

• Hosting, database and authentication (site infrastructure)
• World Air Quality Index — the live AQI widget on the air quality page
• Image hosting and web font providers used to display the site
• Our analytics provider, when you have accepted analytics cookies

Some of these providers are located outside the European Economic Area, including in the United States and Thailand. Where data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account data — for as long as your account exists, then deleted on request.
• Analytics data — retained in aggregate, typically no longer than 26 months.
• Security and server logs — a short rolling window, typically up to 90 days.
• Emails — kept while needed to handle your enquiry and any follow-up.

If you are in the EEA or the UK you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting processing already carried out.

To exercise any of these rights, email run@runninginthailand.com. We will respond within one month.

You also have the right to lodge a complaint with your national data protection authority, or with the UK Information Commissioner's Office if you are in the UK.

This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

We may update this policy as the site changes. The date at the top shows when it was last revised; material changes will be highlighted on the site.