Privacy Policy

1. Introduction

Suan Bua ("we", "us", "our") operates a guesthouse at 219 Maharat Road, Pak Nam, Mueang, Krabi 81000, Thailand. This policy explains what personal information we collect when you contact us, make a booking, or use our website, and how we keep it safe.

Thailand's Personal Data Protection Act B.E. 2562 (PDPA) applies to how we handle your data. We process information lawfully, fairly, and only for the purposes described here.

2. Information We Collect

When you contact us or make a reservation, we may collect your name, email address, phone number, and details of your booking such as arrival and departure dates and flight information. When you visit our website, standard server logs may record your IP address, browser type, and pages viewed.

We collect information through our website contact form, telephone enquiries, in-person at check-in, and through third-party booking platforms if you book via those services.

Legal basis: We process booking data on the basis of contractual necessity. We process enquiry data on the basis of your consent, given when you submit a form or call us. Analytics data is processed on the basis of our legitimate interest in understanding website usage.

Retention: Guest records are kept for 3 years after your stay. Enquiry records where no booking followed are deleted within 12 months. Website analytics data is retained for 26 months.

3. How We Use Your Information

• Confirming and managing your room booking
• Communicating about your stay — arrival details, shuttle timing, changes
• Responding to enquiries you send us
• Improving our website and services based on how they are used
• Complying with legal obligations under Thai law

We do not sell your personal data. We do not use it for marketing unless you have separately asked to hear from us. We share data with third-party booking platforms only to the extent necessary to fulfil a reservation made through those platforms.

4. How We Protect Your Information

Guest records at the property are stored in access-controlled systems. Staff access to personal data is limited to those who need it to do their job. Our website uses HTTPS encryption for all form submissions.

If we become aware of a data security incident that may affect you, we will notify you and the relevant authority within the timeframe required by the PDPA.

5. Cookies

Our website uses essential cookies to keep it working correctly, and optional analytics cookies to understand how visitors use the site. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

6. Your Rights

Under the PDPA you have the right to access the personal data we hold about you, ask us to correct inaccurate information, request deletion of your data where we have no legal obligation to keep it, object to processing, and withdraw consent where consent is the basis for processing. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with how we handle your request, you can raise a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand.

7. External Links

Our website may contain links to booking platforms or travel services. We are not responsible for the privacy practices of those sites. We recommend reviewing their own privacy policies before providing personal information.

8. Minors

Our services are intended for guests aged 18 and over. We do not knowingly collect personal data from children under 18 through our website. Families staying with us provide contact details for the adult who makes the booking.

9. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page. Continued use of our website or services after changes take effect indicates acceptance of the revised policy.