Privacy Policy

When you make a booking enquiry or reservation through our website, by telephone or by email, we collect the following personal data:

• Full name
• Email address
• Phone number (if provided)
• Flight arrival and departure details (times and flight numbers as shared voluntarily)
• Party size and any specific requests shared in messages

When you visit our website, we also collect standard technical data through cookies and server logs, including your IP address, browser type and the pages you visit. Please see Section 5 and our Cookie Policy for more detail.

Legal Basis for Processing

• Performance of a contract: processing your booking and managing your stay
• Legitimate interest: improving our services and communicating with guests
• Consent: marketing communications, analytics and non-essential cookies (you may withdraw at any time)

Retention Periods

• Booking records: 2 years from date of stay, then securely deleted
• Financial transaction records: 7 years (required by Thai tax law)
• Website analytics data: 13 months, then aggregated and anonymised
• Marketing consent records: until consent is withdrawn plus 30 days

We use your personal data only for the purposes for which it was collected:

• Processing and confirming your room reservation
• Arranging airport shuttle transfers where applicable
• Monitoring your departure flight (suite guests who have shared flight details)
• Responding to enquiries submitted through our contact form or by phone
• Sending a post-stay feedback request (one message, no repeated contact without consent)
• Improving our website based on aggregated, anonymised usage data

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

We share your personal data only where necessary:

• Transfer partner: name and phone number shared with our shuttle car provider solely to facilitate your airport transfer
• Hosting provider: website data processed by our hosting partner under a data processing agreement
• Analytics: anonymised usage data through Google Analytics (you may opt out via our cookie controls)
• Legal obligation: we will disclose data if required to do so by Thai law or a valid court order

• Website data is transmitted over TLS-encrypted connections (HTTPS)
• Booking records are stored on password-protected systems with restricted staff access
• Physical records (if any) are kept in a locked filing area on site
• Staff access to guest data is limited to those who need it for their role
• In the event of a data breach affecting your rights, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay

Under the Thai PDPA, you have the following rights regarding personal data we hold about you:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: request deletion of your data where there is no longer a lawful basis for retention
• Restriction: ask us to limit processing in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: withdraw any consent you have given at any time, without affecting the lawfulness of prior processing
• Lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC), Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.