Privacy Policy
Last updated: September 2026
This Privacy Policy is a platform policy draft and does not constitute final legal advice. It describes how OXGuide collects, uses, and protects your information when you use our platform.
Data We Collect
We collect: (1) Account information — name, email, role; (2) Guide, company, and venue profile data — display name, bio, languages, specialties, service areas; (3) License and compliance documents — license numbers, issue/expiry dates, issuing authority, uploaded certificate files; (4) Tour request and job order data — trip details, pax count, activity type, risk level, itinerary; (5) Tourist manifest data — where required for job order compliance; (6) Insurance documents — policy numbers, coverage dates, covered pax count, certificate files; (7) Incident and review data — incident reports, severity, resolution notes, ratings and reviews; (8) Usage and audit logs — page visits, search queries, action logs.
Purpose of Data Use
We use your data for: (1) Identity and role verification; (2) Compliance checks — verifying licenses, insurance, and manifests before job activation; (3) Job order workflow — creating, updating, and tracking job orders; (4) Insurance documentation — storing and verifying coverage; (5) Safety and incident management — recording and resolving incidents; (6) Audit and security — maintaining an immutable audit trail of all actions.
Public vs. Private Data
The public directory shows only limited approved fields: display name, languages, specialties, service areas, bio, and verification status. Sensitive fields — legal name, license numbers, contact details, insurance documents, tourist manifests, incident details — are protected and never shown publicly.
Document Storage
Private documents (license certificates, insurance certificates, evidence files) are stored in private storage and must not be public. Access requires signed URLs with time-limited authorization. Only the record owner, authorized team members, and platform administrators can view private documents.
Data Sharing
Your data is shared only with relevant authorized parties in a job workflow — for example, a venue operator, the assigned guide, and the issuing tour company on a specific job order. We do not sell your data to third parties. We do not share data for marketing purposes.
User Responsibilities
Users must upload accurate documents and keep them current. Users must not upload unnecessary sensitive data beyond what is required for compliance. Providing false or expired documents may result in account suspension and removal from the public directory.
Contact for Privacy Inquiries
If you have questions about this Privacy Policy or your personal data, please contact: socialenterprise@chiangmaiwellbeing.com / LINE ID: @254ktdhe / Call or WhatsApp: +66 98 858 8656.