How we collect, use and protect your personal data when you visit this website, enter the Kata Rocks Poker Run or attend the awards night.
The Kata Rocks Poker Run (“KRPR”, “we”, “us”) is hosted by Kata Rocks, Phuket, and organised with Infinite Luxury. The data controller responsible for your personal data is [Company legal name], [registered address], Thailand.
We process personal data in line with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). Where you are in the UK or European Economic Area, we also respect your rights under the UK GDPR and EU GDPR.
We rely on contract to process your entry, your agreements and your bookings; consent for event imagery under the Agreement for Media Purposes, the newsletter, and analytics cookies; legitimate interests for answering enquiries and keeping the event safe; and legal obligation where the law requires it. You can withdraw consent at any time. This does not affect anything we did before you withdrew.
We never sell your personal data. We share it only where needed to run and promote the event:
When you register, you accept the Agreement for Media Purposes. Under it, Kata Rocks, its Sponsors and Media Partners photograph and record the event, including you, your crew and your boat, and may use those images and recordings without payment, in any medium and without time limit. Typical uses include this website, social media, newsletters, brochures, press and advertising.
Spectators and awards night guests may also appear in event imagery. If you would rather not be featured, tell a member of the team on the day or email us. We will stop using images of you in new material where we reasonably can, although we cannot recall material already printed or published by third parties.
Every participant accepts the Release of Liability, Waiver of Claim and Assumption of Risk Agreement as part of registration. We keep the record of who accepted it, and when, for as long as a claim could be brought under Thai law. It is shared only with Kata Rocks, its insurers and legal advisers, or a court, where needed.
Everyone on board must be 16 or older. Participants aged 16 to 19 are minors under Thai law, so a parent or guardian must accept the Release of Liability and the Agreement for Media Purposes on their behalf, and we collect that parent or guardian’s name and contact details. We do not knowingly collect data from children under 16.
We use essential cookies to make the site work. With your consent, we also use Google Analytics 4 through Google Tag Manager to measure visits, including across katarocks.com so we can see when a visit leads to an entry. You choose which cookies to allow when you first visit, and can change your choice at any time through the cookie settings link in the footer.
Some of our service providers, and some Sponsors and Media Partners, are based outside Thailand. Where data leaves Thailand, we make sure suitable safeguards are in place as the PDPA requires.
Under the PDPA you can ask to access, correct, move or delete your personal data, object to or restrict how we use it, and withdraw consent. Some rights are limited where we need to keep data for legal claims, such as agreement records. We will reply within 30 days. If you are unhappy with our answer, you can complain to Thailand’s Personal Data Protection Committee.
We protect your data with access controls, encrypted connections and trusted providers. We may update this policy from time to time; the date at the top shows when it last changed.
For any privacy question or request, contact our data protection contact at [privacy email], or write to [Company legal name], [registered address], Thailand.
