Privacy
Privacy policy
Last updated 11 Oct 2026
A starting template. Replace the [bracketed] parts and have it checked by someone qualified.
What we collect
Name, contact details, travel dates, flights, special requests, payment details (handled by our payment provider) and passport/ID at check-in, which Thai law requires hotels to report.
Why
To answer you, confirm bookings, arrange transfers, look after your stay and meet legal duties. Marketing only with your consent.
How long
Booking records for [3 years]; legally required records as long as the law requires.
Sharing
Only with providers we need, such as [payment provider], [booking engine] and our transfer company, under data-protection agreements.
Your rights
Access, correct, delete, port, object or withdraw consent — contact [DPO email]; we reply within 30 days.
Controller
[Company name] [address] [tax ID] [email]