Personal Data Protection Policy (PDPA)

Secret Resort ("we," "us," or "our") respects the privacy of our guests and website visitors. To ensure your confidence in our services, this policy explains how we collect, use, disclose, and protect your personal data.

1. Personal Data We Collect

We collect only the personal data necessary to provide our services, including:

1. Identity Data: Full name, ID card number, passport number, date of birth.
2. Contact Data: Phone number, email address, postal address, social media accounts.
3. Reservation & Stay Data: Check-in and check-out dates, room preferences, special requests (e.g., dietary, transportation).
4. Financial Data: Credit/debit card details, bank account numbers, payment history.
5. Technical Data: IP address, browser type, and data collected via Cookies on our website.

2. Purposes of Data Processing

We process your personal data for the following purposes:

1. To process room reservations, verify identity, and provide hospitality services during your stay.
2. To handle billing, payment processing, and issue financial receipts/tax invoices.
3. To communicate, respond to inquiries, and offer exclusive marketing promotions (subject to your consent).
4. To maintain resort security (e.g., CCTV monitoring) and optimize website performance.

3. Disclosure of Personal Data

We keep your personal data confidential and will not disclose it to third parties except for:

1. Trusted third-party service providers essential to our business operation (e.g., booking engines, payment gateways).
2. Government agencies or legal authorities as mandated by law (e.g., Immigration Bureau).

4. Data Retention Period

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable laws (typically not exceeding 10 years after your last service with us).

5. Your Rights as a Data Subject

Under the PDPA, you have the right to access, request a copy of, rectify, transfer, object to processing, or request the deletion/anonymization of your personal data. You also hold the right to withdraw consent at any time by contacting us.

6. Contact Information

If you have any questions or wish to exercise your data protection rights, please contact us at:

1. Data Controller: Secret Resort
2. Email: secretresort9@gmail.com
3. Phone: +66 9949 52497
4. Address: 109/9 Moo 6 Tanon Liangmuang, Makhamtia Subdistrict, Muang District, Suratthani 84000 Thailand