Privacy Policy

1. Who We Are

This Privacy Policy applies to the website patongpoolaccess.com (the “Site”), which is operated by the management of the pool access room accommodation at:

198/22 Phrabaramee Road, Patong, Kathu, Phuket 83150, Thailand

For privacy enquiries, contact us at info@patongpoolaccess.com or by phone at +66 76 290 480.

We are subject to the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”). Where visitors access this Site from the European Economic Area, the United Kingdom, or other jurisdictions with data protection legislation, we also observe those requirements to the extent reasonably applicable.

2. What We Collect

Information collected automatically

When you visit this Site, our hosting provider (Cloudflare, Inc.) automatically records standard server log data, which may include:

• Your IP address (anonymised by Cloudflare)
• Browser type and version
• The page(s) you visited and the time of your visit
• Referring URL (the page you came from)
• Device type and operating system

This data is used solely for security, performance monitoring, and aggregate analytics. It is processed by Cloudflare under their own privacy policy and is not used by us to identify individual visitors.

Information you provide

This Site does not currently operate any contact forms, newsletter sign-ups, or user accounts. We do not directly collect your name, email address, or payment information.

If you contact us by telephone or email (using the contact details listed on this Site), we will process your name, contact details, and the content of your message in order to respond to your enquiry. This processing is based on our legitimate interest in responding to customer enquiries, and on your consent in initiating contact.

Booking information

Room reservations are processed through a third-party booking platform. Any personal data you submit when making a booking (name, contact details, payment information) is collected and processed by that platform under its own privacy policy. We receive only the booking confirmation details necessary to manage your reservation.

3. How We Use Your Information

We process personal data only for the following purposes and on the following legal bases:

• To operate and secure the Site — Legitimate interest (website security and performance).
• To respond to telephone and email enquiries — Legitimate interest and consent.
• To manage room reservations — Performance of a contract (your booking).
• To comply with legal obligations — Legal obligation (tax records, guest registration as required under Thai law).

We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Third Parties & Data Transfers

Cloudflare, Inc.

This Site is hosted and delivered via Cloudflare’s global network. Cloudflare processes traffic data to provide DDoS protection, performance optimisation, and Web Analytics. Cloudflare is headquartered in the United States and complies with applicable data transfer frameworks. See Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

Google LLC

This Site uses two Google services:

• Google Fonts: Loaded directly from Google’s servers. When your browser requests a font, Google may log your IP address. See Google Privacy Policy.
• Google Maps (embedded): The Location page embeds a Google Maps iframe. If you interact with the map, Google may set cookies and collect location and usage data under Google’s own privacy policy.

Both services may transfer data to the United States or other countries. Google operates under the EU-US Data Privacy Framework and other applicable transfer mechanisms.

Booking platform

When you click a “Book Now” or “Reserve” link, you are redirected to a third-party booking platform. That platform is solely responsible for the personal data you provide during the booking process. We are not a data processor for that transaction.

No other sharing

We do not share personal data with any other third parties except where required by Thai law (such as the hotel guest registration requirement under the Hotel Act B.E. 2547) or where you have given explicit consent.

5. Cookies

Cookies are small text files placed on your device by websites you visit. This Site itself does not set first-party cookies for tracking or marketing purposes.

However, third-party services embedded in this Site may set their own cookies:

• Google Maps: May set cookies when the embedded map on the Location page loads or is interacted with. These are Google’s cookies, governed by Google’s cookie policy.
• Cloudflare: May set a short-lived security cookie (__cf_bm) to distinguish automated traffic. This is a strictly necessary cookie and cannot be disabled without affecting Site functionality.

You can manage or delete cookies through your browser settings. Disabling all cookies may affect how some parts of this Site (particularly the embedded map) function.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Server log data: Retained by Cloudflare per their standard retention periods (typically up to 30 days for detailed logs).
• Email and telephone enquiries: Retained for up to 12 months after the last communication, then deleted unless a booking was made.
• Booking records: Retained for 7 years as required by Thai tax and accounting law.
• Guest registration records: Retained as required under the Hotel Act B.E. 2547.

7. Your Rights

Under Thailand’s PDPA, and where applicable under the GDPR or UK GDPR, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data, subject to legal retention requirements.
• Right to restriction: You may ask us to restrict processing of your data in certain circumstances.
• Right to data portability: You may request your data in a structured, machine-readable format (where technically feasible).
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@patongpoolaccess.com. We will respond within 30 days. You also have the right to lodge a complaint with Thailand’s Personal Data Protection Committee, or with the supervisory authority in your country of residence.

8. Security

This Site is served over HTTPS. Our hosting provider (Cloudflare) provides industry-standard security measures including DDoS protection, TLS encryption in transit, and access controls. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data.

We do not store payment card information. All payment processing is handled by the third-party booking platform.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be noted prominently. We encourage you to review this policy periodically.

Continued use of this Site after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

For any questions, requests, or concerns about this Privacy Policy or how we handle your personal data:

• Email: info@patongpoolaccess.com
• Phone: +66 76 290 480
• Post: 198/22 Phrabaramee Road, Patong, Kathu, Phuket 83150, Thailand