Privacy Policy

1. Introduction

Phimai House ("we", "us", "our") is committed to handling the personal data of guests and website visitors with care and transparency. This policy explains what information we collect, why we collect it, how it is used and the choices available to you regarding your data.

This policy applies to personal data collected through our website at phimaihou.pro, through our contact form, by telephone and during the course of a guest stay at 81 Maharat Road, Nuea Khlong, Krabi 81130, Thailand.

Questions about this policy may be directed to [email protected].

2. Data We Collect

2.1 Information You Provide Directly

• Full name (required for reservations and check-in)
• Email address (for booking confirmation and correspondence)
• Telephone number (optional, for shuttle coordination and urgent contact)
• Flight details (arrival and departure times and flight numbers, used to arrange shuttle and check-in windows)
• Number of guests and room preferences
• Any additional requests included in your message

2.2 Information Collected Automatically

• Website usage data via analytics cookies (pages visited, time on site, device type)
• IP address and browser type for security and performance monitoring
• Cookie preferences stored in your browser's local storage

2.3 Legal Basis for Processing

We process your personal data on the following grounds: fulfilment of a service contract (reservation and stay), our legitimate interest in operating and improving the property, your consent (for marketing cookies and optional communications) and compliance with legal obligations under Thai law.

2.4 Retention Periods

Reservation and guest records are retained for 3 years following the stay for accounting and legal compliance. Analytics data is retained for 14 months. You may request deletion at any time where retention is not required by law.

3. How We Use Your Data

• To process and confirm room reservations
• To coordinate airport shuttle timing and check-in arrangements
• To communicate about your booking by email or telephone
• To improve our website and services using aggregated analytics
• To comply with legal obligations including tax and hospitality licensing requirements in Thailand

We do not send marketing emails without your express consent. If you have opted in, you may withdraw consent at any time by emailing [email protected].

3.1 Sharing with Third Parties

We do not sell your personal data. We may share data with trusted service providers (website hosting, analytics) under data processing agreements that require them to protect it. We may disclose data where required by Thai law or court order.

4. Data Protection Measures

• All data transmitted via the website is protected using HTTPS (TLS encryption)
• Guest records are stored in access-controlled systems accessible only to authorised staff
• Physical guest records (if any) are kept in a locked area within the property
• In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of it
• We review our security practices annually and when significant changes are made to our systems

5. Cookies

Our website uses cookies to remember your preferences and to understand how visitors use the site. Essential cookies are required for the site to function and cannot be disabled. Analytics and marketing cookies are optional and require your consent.

Full details are available in our Cookie Policy.

6. Your Rights

Under applicable data protection principles and Thai personal data protection regulations (PDPA), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct any inaccurate data
• Erasure — request deletion of your data where we are not legally required to retain it
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — at any time where processing is based on your consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee.

7. Third-Party Links

Our website may include links to third-party sites such as Google Maps. We are not responsible for the privacy practices of those sites and recommend reviewing their own policies before providing any personal data to them.

8. Children's Privacy

Our website and reservation service are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has submitted data through our site, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If changes are significant, we will notify active guests by email where we hold a current address. Continued use of our website after an update constitutes acceptance of the revised policy.