Privacy policy

Section 1

Data Controller Information

The data controller responsible for your personal information under the Thailand Personal Data Protection Act (PDPA) B.E. 2562 (2019) is:

Section 2

Information We Collect

Depending on how you interact with us, we may collect the following information:

• Contact and inquiry information: your name, email address, phone number and information you provide when contacting us, requesting information, booking a visit or submitting an inquiry.
• Accommodation and service information: room preferences, intended dates, residency or short-stay requirements, family and emergency contacts, service requests, booking and payment records, and identification details where needed for the stay or required by law.
• Health and care information: information relevant to suitability, support, mobility, dietary needs, disability, wellness or care arrangements. Please do not include medical records or sensitive details in an ordinary website inquiry; contact our team to arrange an appropriate way to share them.
• Newsletter information: your email address, subscription choices and marketing preferences.
• Technical information: IP address, browser, device, time zone, website usage and cookie identifiers. Optional analytics and advertising information is collected only when those categories are enabled.

We receive information directly from you, from your authorised representative or family contact, and, where lawfully permitted, from providers involved in your requested services. Please share another person’s details only when you have authority or another lawful reason to do so, and make this notice available to them.

We identify information that is required for a booking, legal obligation or requested service when we ask for it. If necessary information is not provided, we may be unable to confirm a stay or safely arrange that service. Optional marketing information is not a condition of accommodation.

Section 3

How and Why We Use Information

• Inquiries, consultations, tours, applications and bookings: to respond to your requests and take steps towards or perform an agreement with you.
• Accommodation, hospitality and community services: to arrange your stay, provide operational updates and coordinate requested wellness and support services.
• Resident and family support: to communicate with residents and authorised representatives about agreed services, using the appropriate contractual, consent or other lawful basis for the circumstances.
• Newsletters and marketing: to send updates where you have consented. You can unsubscribe at any time.
• Website improvement and advertising measurement: to understand website use and measure campaigns when you allow the relevant optional cookies.
• Safety, security and administration: to protect people and systems, prevent misuse, handle complaints and establish or defend legal claims where necessary for legitimate interests, taking account of your rights.
• Legal obligations: to meet applicable accounting, tax, reporting and other legal requirements.

Health and other sensitive information receives additional protection. We require explicit consent unless a specific exception under Thai law applies, such as qualifying health-care processing or protection of life when a person cannot consent. An ordinary booking agreement alone does not authorise every use of sensitive information.

Where consent is the basis, it is a separate choice and can be withdrawn. We explain any effect on a requested service before you decide. Withdrawal does not affect processing that was lawful before withdrawal.

Section 4

Who We Share Information With

We do not sell your personal information. We share information only as necessary for a stated purpose and with an appropriate lawful basis:

• Service providers: IT and hosting, payment processing, customer relationship management, email delivery, website maintenance and professional advisers.
• Care and service partners: hospitals, clinics, caregivers, transport and wellness providers where needed for requested services and lawfully authorised.
• Analytics and advertising providers: Google Analytics and Meta receive technical and interaction data when the corresponding category is enabled. They may process information under their own privacy notices; this does not authorise sending them your health or care records.
• Authorities and legal recipients: where Thai law, a lawful request, court order or the protection of legal rights requires or permits disclosure.

External providers may act as independent controllers for their own services. Their privacy notices apply to those activities. We limit information supplied to processors to what they need for their work.

Section 5

Your Rights and Choices

Subject to the conditions and exceptions in the PDPA, you may request:

• Access to and a copy of your personal information, including information about its source where applicable.
• Correction of inaccurate or incomplete information.
• Deletion, destruction or anonymisation when the legal conditions are met.
• Restriction of processing, or objection to processing where applicable. You may object to direct marketing at any time.
• Data portability where the processing and data meet the legal requirements.
• Withdrawal of consent for processing that relies on consent.

Contact Kantiya Suwan using the details in Section 1. We may ask for proportionate information to verify your identity or a representative’s authority. We respond within the applicable legal period; qualifying access requests must be addressed without delay and within 30 days. If a legal exception prevents us from fulfilling a request, we explain the reason.

You may also complain to Thailand’s Personal Data Protection Committee (PDPC). You do not have to contact us first to exercise a statutory complaint right.

Section 6

Cookies and Third-Party Content

Our website uses local storage to remember your cookie choices until you change them or clear your browser’s site data.

• Analytics (optional): Google Analytics helps us understand website use. It may use identifiers such as _ga cookies.
• Marketing (optional): Meta Pixel measures advertising and may use identifiers such as _fbp. Provider cookie lifetimes vary and may change.

Both optional categories are enabled by default for new visitors. Uncheck either category below and save to turn it off. Your saved choices apply on future visits. You can change them through “Cookie settings” in the footer. Turning off optional cookies does not prevent browsing or making an inquiry.

Room videos use YouTube’s privacy-enhanced embed and connect to YouTube when you choose to play them. Opening WhatsApp, maps, social links or a partner website takes you to that provider’s service, which has its own privacy and cookie terms. Our newsletter form loads Google reCAPTCHA when you submit it to help prevent automated abuse. Google processes device and interaction information for this security check under its own privacy policy. Forms on linked services may also use anti-spam tools; check the notice where you submit your information.

Read the Google privacy policy and Meta privacy policy for their processing practices.

Section 7

Website Analytics

When analytics is enabled, we use a random first-party browser cookie for up to 90 days to recognise repeat visits. A separate visit cookie expires after 30 minutes without a new pageview. We store secret-key hashes of these identifiers with the public page viewed, time, language, device type, browser, operating system, country estimate and general referral source. We do not store raw IP addresses, full browser identification strings, URL query parameters or email-management tokens in page-view records. These records are pseudonymous, not anonymous. They are retained for up to 365 days and shown to administrators in summary reports. Turning analytics off stops future collection and removes these cookies. Private account and email-management pages are excluded.

When analytics is enabled, our server temporarily uses your IP address to estimate your country using a locally stored country lookup database. We save only the country code in our page-view records, not the IP address, and do not send your IP address to an external country lookup service. This does not determine your precise location or nationality. VPNs, proxies and mobile networks can affect the estimate; if a country cannot be identified, it is recorded as unknown.

Section 8

How Long We Keep Information

We retain personal information only as long as necessary for the purposes for which it was collected, legal obligations, dispute resolution and the enforcement of agreements.

The period depends on the type of record: inquiries are kept while needed for follow-up; booking and residency records for administering the relationship and applicable claims; financial records for required accounting and tax periods; and health or care records for the relevant service and any applicable record-keeping obligations. Marketing information is retained until you unsubscribe or it is no longer needed, with limited suppression records where necessary to respect your choice.

We consider statutory retention periods, limitation periods, ongoing disputes and operational necessity. When information is no longer needed, it should be securely deleted or anonymised; backups are removed through their scheduled lifecycle. Contact us for information about the retention period applying to your records.

Section 9

Keeping Information Secure

We use reasonable administrative, technical and organisational safeguards against unauthorised access, misuse, loss, alteration and disclosure. Access should be limited to people who need information for their work, with appropriate obligations for service providers.

No transmission or storage system is completely secure. If a personal data breach occurs, we assess it and notify the regulator and affected individuals where required by the PDPA. Please contact us promptly if you suspect misuse of your information.

Section 10

Information Sent Outside Thailand

Hosting, communication, analytics and advertising providers may process information outside Thailand. Where personal information is transferred overseas, the applicable PDPA transfer requirements must be met, using an adequate level of protection, appropriate safeguards or a permitted legal exception. You can contact us for details of recipients and safeguards relevant to your information.

Section 11

Updates to This Notice

We may update this notice to reflect changes in services, processing or legal requirements. The date at the top identifies this version. Material changes will be brought to your attention where required, and fresh consent will be requested where necessary. A notice update does not itself authorise a new use requiring consent.