Privacy Policy
Last updated: 22 October 2026
About this policy
Tiger Eye Management Co., Ltd. (“Tiger Eye”, “we”, “us”) runs Tiger Eye MMA, a Muay Thai, MMA, Brazilian Jiu-Jitsu and boxing gym in Ari, Bangkok, Thailand. We also help students apply for the Destination Thailand Visa (DTV) through our training packages. We are a Muay Thai school, not a government agency.
This policy explains how we collect, use and protect your personal data when you visit tigereyemma.com, sign up through our trial pages at start.tigereyemma.com, use our checkout and referral pages at dtv.tigereyemma.com, book a class or a consultation, apply for a DTV with our help, or contact us.
Because our DTV support involves identity documents and financial records, some of the data we handle is sensitive. We take that responsibility seriously.
We are the data controller for this information under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). If you are in the European Union or the United Kingdom, we also respect the rights you have under the GDPR and UK GDPR.
Information we collect
We collect only what we need to run your training, support your visa application and keep in touch with you. We collect it when you fill in a form, take our eligibility check, book or attend a consultation, buy a package, send us documents, message us, or browse our website.
- Trial and inquiry forms. Your first name, email address, phone number, and the trial you chose (for example First Week Trial, Kids classes, BJJ or Women’s Muay Thai).
- Bookings and memberships. When you book a class or buy a package, we keep your name, contact details, the package you bought, payments you made at the gym, and your booking and attendance history.
- DTV eligibility check and consultation. Your contact details and your answers to our eligibility check, such as when you plan to apply, your age, the passport you will apply with, whether you meet the embassy’s savings requirement, and whether you expect any issues getting a police clearance certificate. If you book or attend a consultation, we also keep notes of what you tell us about your situation and plans.
- DTV application documents. When you enroll in a DTV package, the documents and details your application needs, such as a passport photo, your date and place of birth, where you live, details of your travel or immigration history, and any other details the embassy may ask for.
- Payments. Card payments in our online checkout are processed by Stripe. We never see or store your full card number. Stripe also collects information about the device you pay with, to prevent fraud, under its own privacy policy. If you pay by bank transfer or PayPal, we keep the payment confirmation you send us.
- Referral program. If you refer a friend, or a friend refers you, the names, email addresses and rewards entered in our referral form.
- Reviews and testimonials. If you choose to give us a review, photo or video testimonial, the content you share with us.
- Messages. Anything you send us by email, WhatsApp, phone, Facebook, Instagram or the chat on our website.
- Photos and videos. Photos or videos taken in class or at events.
- Children’s details. For kids classes, the parent or guardian’s contact details and the child’s name and age.
- Website usage data. Your IP address, device and browser type, pages viewed, how you scroll and click on our pages, the site that referred you, approximate location, and cookie identifiers. This is collected automatically through cookies and similar technologies (see Cookies, analytics and advertising).
- Information from others. Analytics and advertising data from providers such as Google, Meta and Microsoft, and information you make public when you contact us through social media.
Giving us your information is voluntary, but we need some details to check your eligibility and support your application.
Sensitive data. Your answer about a police clearance certificate in our eligibility check, may include criminal record information, which the PDPA treats as sensitive. We ask for it only because embassies require it for the DTV, we collect it only with your explicit consent, and we use it only for your application. If you don’t give this consent, or withdraw it, we can’t check that part of your eligibility or prepare your application. We treat your financial records and identity documents with the same extra care. We do not ask for other sensitive data, such as health, religious or biometric information, through our website. If you tell a coach about an injury or condition, we use it only to keep you safe in class.
How we use your information
The PDPA requires a lawful basis for each use of personal data. Ours are below.
| Purpose | Lawful basis |
|---|---|
| Reply to inquiries and set up your trial pass | Steps you asked for before entering a contract |
| Check your DTV eligibility, hold your consultation and answer your questions | Steps you asked for before entering a contract, plus your explicit consent for your answer about a police clearance certificate |
| Manage bookings, memberships and attendance | Performance of our contract with you |
| Prepare your DTV enrollment documents and, depending on your package, review your application | Performance of our contract with you, plus your explicit consent for your police clearance certificate |
| Take payments, and handle refunds and reapplications | Performance of our contract with you |
| Run our referral program and deliver rewards | Our legitimate interests |
| Answer your messages, sometimes first through an AI assistant | Steps you asked for before entering a contract, or our legitimate interests |
| Follow up on your trial or DTV inquiry, and send booking reminders | Steps you asked for before entering a contract, or our legitimate interests |
| Send offers and gym news by WhatsApp, SMS or email | Your consent |
| Photograph or film classes and events for our website and social media | Our legitimate interests (tell us if you prefer not to appear), or a parent’s or guardian’s consent for children |
| Share your review or testimonial on our website and social media | Your consent |
| Measure how our website is used and improve it | Your consent (analytics cookies) |
| Show you our ads on Google, Facebook and Instagram and measure their results | Your consent (advertising cookies) |
| Keep accounting and tax records | Legal obligation |
| Confirm your enrollment or attendance when Thai immigration or another authority asks | Legal obligation, or our legitimate interests |
| Keep the gym, website and members safe, and handle disputes or legal claims | Our legitimate interests |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
Cookies, analytics and advertising
Cookies are small files stored on your device. We use essential cookies to make the website work, and we use the analytics and advertising tools below.
| Tool | Provider | What it does | How to opt out |
|---|---|---|---|
| Google Analytics | Counts visits and shows which pages people use | Google Analytics opt-out add-on | |
| Google Ads remarketing | Measures ad results and shows our ads to people who visited our website | My Ad Center | |
| Meta Pixel | Meta (Facebook, Instagram) | Measures ad results and shows our ads to people who visited our website | Facebook ad preferences |
| Microsoft Clarity | Microsoft | Captures how you use our website through behavioral metrics, heatmaps and session recordings, so we can improve our website and our marketing | Block cookies and tracking in your browser |
We may use Google Analytics Advertising Features, such as remarketing and demographics and interests reporting. These tools use first-party cookies (such as the Google Analytics cookie) together with third-party cookies (such as Google advertising cookies) and similar technologies. Third parties, including Google, Meta and Microsoft, may use them to collect information from our website and elsewhere on the internet, and use that information to provide measurement services and show targeted ads. They may combine it with information they already hold about you, under their own policies: How Google uses information from sites that use its services, Meta Privacy Policy and Microsoft Privacy Statement.
You can opt out of interest-based ads from many companies at aboutads.info/choices or, in Europe, youronlinechoices.eu. You can also block or delete cookies in your browser settings at any time. Blocking essential cookies may stop parts of the website, such as the class schedule, from working.
Marketing messages
We may contact you by WhatsApp, SMS, email or phone to follow up on your trial or DTV inquiry and to remind you of bookings. With your consent, we also send offers and gym news.
You can stop these messages at any time, and it will not affect your training with us:
- reply STOP to an SMS or WhatsApp message,
- click unsubscribe in any marketing email, or
- tell us at yourtigereye@gmail.com or +66 99 259 5988.
We will still send messages you need about your bookings, your payments or your visa application.
Who we share it with
We do not sell your personal data. We share it only with the service providers below and the others named in this section, and only as much as they need.
| Provider | What they do for us |
|---|---|
| PushPress | Class schedule, bookings and member records |
| HighLevel (LeadConnector) | DTV eligibility check, consultation bookings, checkout, forms, contact records, website chat and AI assistant, follow-up messages, and our trial sign-up pages |
| Stripe | Card payments in our online checkout |
| PayPal | PayPal payments |
| Website analytics, advertising, tag management and email | |
| Meta | Advertising measurement, WhatsApp, Facebook and Instagram messaging |
| Microsoft | Email and Microsoft Clarity website analytics |
| Our website host | Hosting and maintaining tigereyemma.com |
| Contractors | Website development, marketing and content creation, under confidentiality |
We may also share data with our accountants or legal advisers, or with government authorities when the law requires it.
International transfers. Several of these providers store data outside Thailand, mainly in the United States. When we transfer data abroad, we do so on a basis the PDPA allows: because the transfer is needed to provide the service you asked for, or because the provider has given appropriate data protection commitments. If you are in the EU or the UK, we rely on appropriate safeguards, such as standard contractual clauses, where the GDPR or UK GDPR requires them. You can ask us for a copy of these safeguards.
Children’s information
We run kids classes, so we hold some information about children. Under Thai law, anyone under 20 is a minor.
- We collect a child’s details only from their parent or guardian, and rely on that parent or guardian’s consent.
- Our website and sign-up forms are meant for adults. Children should not submit their own details.
- Parents and guardians can use all the rights below on their child’s behalf.
If you think a child has given us personal data without a parent’s consent, contact us and we will delete it.
How long we keep it, and how we protect it
We keep personal data only as long as we need it, then delete or anonymise it.
| Data | How long we keep it |
|---|---|
| Trial and DTV inquiries from people who do not join | Up to 2 years after our last contact |
| Member and booking records | While you train with us, plus 2 years |
| Your answer about a police clearance certificate, if you do not join | Up to 12 months after our last contact |
| Other DTV application documents | Up to 12 months after the embassy’s decision on your application |
| Referral records | Up to 2 years after the referral is closed |
| Reviews, testimonials, photos and videos | Until you ask us to remove them |
| Payment and accounting records | At least 5 years, as Thai accounting and tax law requires |
| Website analytics data | Up to 14 months |
| Marketing contact list | Until you opt out |
If you ask us to delete your data and we have no legal reason to keep it, we will delete it.
Only staff who need your data can access it, and our providers use industry-standard security such as encrypted connections. No system is completely secure. If a breach is likely to put your rights at risk, we will notify Thailand’s Office of the Personal Data Protection Committee within 72 hours where feasible, and if the risk to you is high, we will also tell you without delay.
Your rights
Under the PDPA, and the GDPR if it applies to you, you have the right to:
- Access your personal data and get a copy of it
- Correct data that is wrong or incomplete
- Delete your data, or have it anonymised
- Restrict how we use your data
- Object to our use of your data, including for marketing
- Move your data to another provider in a common electronic format
- Withdraw consent at any time, without affecting what we did before you withdrew it
To use any of these rights, email yourtigereye@gmail.com, send a letter by registered mail to our registered address, or hand in your request at our gym (addresses below). We may ask you to confirm your identity first. We will reply within 30 days of receiving your complete request. If a request is complex, we may need up to 30 more days, and we will tell you why. Copies are free of charge.
You can also complain to Thailand’s Office of the Personal Data Protection Committee at pdpc.or.th. If you are in the EU or UK, you can complain to your local data protection authority.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. If we make a significant change, we will post a notice on our website or tell you directly.
Contact us
Tiger Eye Management Co., Ltd. (Tiger Eye MMA)
Company registration number: 0205561014232
172 Soi Charoen Pon 1, Phaya Thai, Bangkok 10400, Thailand
Email: yourtigereye@gmail.com
Phone and WhatsApp: +66 99 259 5988