Privacy Notice

Secret Resort ("we," "us," or "our") respects your privacy and is committed to protecting the personal data of all guests, service users, and website visitors. This Full Privacy Notice is provided to inform you of how we collect, use, disclose, and protect your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA).

1. Personal Data We Collect

We collect personal data directly from you through our booking platforms, website, and resort check-in process. This includes:

1. Identity Data: Full name, ID card number, passport number, date of birth, nationality, and photographic/video images from Closed-Circuit Television (CCTV) operated within our public resort areas.
2. Contact Data: Phone number, email address, physical address, and social media accounts.
3. Reservation & Stay Data: Check-in and check-out dates, room details, stay history, travel itineraries, and special requests (e.g., dietary requirements or special assistances).
4. Financial Data: Credit/debit card details, bank account numbers, payment history, and invoices/tax receipts.
5. Technical Data: IP address, browser type, and data collected via Cookies to enhance website performance.

2. Purposes and Legal Bases for Data Processing

We process your personal data based on the following legal grounds provided under the PDPA:

1. Contractual Basis: To process room reservations, verify your identity, process payments, and deliver hospitality services throughout your stay.
2. Legal Obligation: To comply with applicable laws, such as reporting foreign guests to the Immigration Bureau and maintaining records for accounting and tax purposes.
3. Legitimate Interest: To ensure the safety and security of lives and properties within the resort through CCTV monitoring, and to improve our services and website user experience.
4. Consent: To send marketing materials, exclusive updates, offers, and seasonal promotions (which you can withdraw at any time).

3. Disclosure of Personal Data to Third Parties

We keep your personal data confidential and will not disclose it to third parties except when necessary to:

1. Trusted third-party service providers and business partners, including booking engines, property management systems, banks, and payment gateways.
2. Government agencies or law enforcement authorities as mandated by law, such as the Immigration Bureau, Royal Thai Police, or Revenue Department.

4. International Data Transfers

Where we utilize cloud storage services whose servers are located abroad, we ensure that the destination country maintains an adequate level of data protection standards. Your data will only be transferred for secure data storage and backup purposes.

5. Data Retention Period

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this notice. Generally, we retain data for a period not exceeding 10 years from the date our service agreement terminates, unless a longer retention period is required by applicable law. After this period, we will securely delete, destroy, or anonymize your personal data.

6. Your Rights as a Data Subject

Under the PDPA, you possess the following rights, which you may exercise by contacting us:

1. Right to Access and Obtain a Copy of your personal data.
2. Right to Rectification to keep your data accurate, up-to-date, and complete.
3. Right to Erasure or Destruction of your data when it is no longer needed.
4. Right to Restriction of Processing regarding your personal data.
5. Right to Object to the collection, use, or disclosure of your data.
6. Right to Withdraw Consent at any time where consent was previously given.
7. Right to Data Portability to transfer your data to another data controller.
8. Right to Lodge a Complaint with the Personal Data Protection Committee in the event of non-compliance.

7. Contact Information

If you have any questions regarding this Privacy Notice or wish to exercise your data subject rights, please contact our Data Controller directly at:

1. Data Controller: Secret Resort
2. Email: secretresort9@gmail.com
3. Phone: +66 9949 52497
4. Address: 109/9 Moo 6 Tanon Liangmuang, Makhamtia Subdistrict, Muang District, Suratthani 84000 Thailand