Privacy Policy

1. Who We Are

The data controller for this website is:

Suan Mali
73 Mahidol Road, Pa Daet, Mueang, Chiang Mai 50100, Thailand
Phone: +66 53 273 819
Email: [email protected]

We operate a small guesthouse near Chiang Mai International Airport (CNX). This policy covers personal data collected through our website and booking enquiries.

2. Data We Collect

We collect personal information in the following ways:

• Enquiry and booking forms: name, email address, phone number, arrival date, flight details and any notes you include.
• Email and phone contact: correspondence details when you contact us directly.
• Website analytics: anonymised data about how pages are viewed (page visits, browser type, approximate location by country).
• Cookies: small files placed in your browser to support site functionality and optional analytics. See Section 6 for details.

We do not collect payment card details directly. Any payments are processed by third-party providers under their own data protection terms.

3. How We Use Your Data

We use personal data for the following purposes:

• Service delivery: to confirm and manage your reservation, arrange shuttle services and respond to your enquiries.
• Communication: to send booking confirmations, pre-arrival information and follow-up messages related to your stay.
• Operations: to coordinate room availability, staffing and transport scheduling.
• Legal compliance: to fulfil obligations under Thai law, including guest registration requirements for accommodation providers.
• Website improvement: to understand how visitors use our site so we can improve it over time.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process personal data under the following legal grounds:

• Contract performance: processing necessary to fulfil a reservation or respond to a pre-booking enquiry.
• Legal obligation: guest registration as required under Thai hotel and accommodation regulations.
• Legitimate interests: website analytics and operational improvement, balanced against your privacy rights.
• Consent: for optional analytics and marketing cookies, which you may withdraw at any time via our Cookie Policy page.

5. Data Retention

We keep personal data for as long as necessary for the purposes described above:

• Guest records: three years from the date of your stay, in line with Thai legal requirements for accommodation providers.
• Enquiries not resulting in a booking: twelve months from the date of enquiry.
• Analytics data: aggregated and anonymised; not stored in identifiable form beyond 26 months.

After the applicable retention period, data is securely deleted or anonymised.

6. Cookies

We use cookies to support basic site functionality and to understand how visitors navigate our pages. Cookies are divided into:

• Essential cookies: required for the site to work correctly. These cannot be disabled.
• Analytics cookies: optional; help us understand page usage patterns without identifying individuals.
• Preference cookies: optional; remember settings you have chosen.

You can manage your cookie preferences at any time on our Cookie Policy page.

7. Data Sharing

We do not sell your personal data. We share it only in the following limited circumstances:

• Service providers: third-party platforms that assist with email delivery, website hosting or analytics. These providers act under data processing agreements and are not permitted to use your data for their own purposes.
• Legal requirements: disclosure to Thai authorities where required by law, such as immigration or hotel registration obligations.
• Business transfer: in the event that Suan Mali is sold or its operations transferred, personal data held at that time may form part of the transferred assets. You would be notified in advance.

8. Data Security

We take reasonable steps to protect personal data from unauthorised access, loss or disclosure:

• Website traffic is encrypted via HTTPS (TLS).
• Enquiry data is stored on access-controlled systems.
• Staff with access to guest data are trained to handle it with care.
• In the event of a data breach that may affect your rights, we will notify you and any relevant authority as required by applicable law.

9. Your Rights

You have the following rights in relation to your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your data where there is no longer a legitimate reason for us to hold it.
• Restriction: ask us to limit processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format where applicable.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing relies on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected] or by phone. We aim to respond within 30 days.

You also have the right to lodge a complaint with the relevant supervisory authority in Thailand or in your country of residence if you believe your data has been handled incorrectly.

10. Third-Party Links

Our website may contain links to external sites such as maps, travel platforms or partner services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our website and booking services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted data to us without parental consent, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy. If changes are significant, we will make reasonable efforts to notify guests who have an active booking.

13. Contact for Privacy Enquiries

For any questions about this policy or how we handle your data, please contact us:

Suan Mali — Privacy Enquiries
73 Mahidol Road, Pa Daet, Mueang, Chiang Mai 50100, Thailand
Phone: +66 53 273 819
Email: [email protected]