Privacy Notice

In accordance with Thailand's Personal Data Protection Act (PDPA, B.E. 2562 / 2019).

Last updated: please customize per client.

1. Who we are

Max Pavillage () is the data controller for personal data collected through this website. You can contact us at 02-580-7744 or bigzen2015@yahoo.com.

2. What personal data we collect

• Contact details you provide when booking (name, phone, email, LINE ID, country of residence)
• Reservation details (check-in/out dates, room type, special requests, number of guests)
• Government-issued ID information collected at check-in, as required by Thai immigration / hotel law
• Payment method information processed by our payment provider (we do not store full card numbers)
• Communication history with our front desk (messages, emails, phone records)
• Basic technical data (browser, device type, pages viewed) for site operation

3. Why we collect it (lawful basis)

We collect personal data to process your reservation, communicate with you before and during your stay, comply with our legal obligations as a Thai accommodation provider (including registration of foreign guests with the Royal Thai Police where required), prevent fraud, and improve our service. The lawful bases are: contract (to provide your stay), legitimate interest (to run the property safely), legal obligation (guest-registration and tax-record laws), and consent (for marketing messages, where you have opted in).

4. How long we keep it

Reservation and guest-registration records are retained for the period required by Thai accommodation, tax, and immigration regulations. Booking communication records are kept for a reasonable period after your stay to handle follow-up requests or disputes. Marketing-consent records are kept until you withdraw consent.

5. Who we share it with

We do not sell personal data. We share it only with: our front-desk and housekeeping staff, payment processors when you pay online, booking aggregators (e.g. Booking.com / Agoda) when reservations come through them, hosting and IT providers under data-processing agreements, and Thai government authorities (immigration, tax, police) where legally required.

6. Your rights under PDPA

As a data subject in Thailand, you have the right to:

• Withdraw consent at any time
• Access the personal data we hold about you
• Request correction of inaccurate data (rectification)
• Request deletion (erasure)
• Request suspension of use
• Request data portability where technically feasible
• Object to certain processing
• File a complaint with the Personal Data Protection Committee (PDPC)

To exercise any of these rights, contact us at bigzen2015@yahoo.com or 02-580-7744. We will respond within 30 days.

7. Cookies and analytics

This site uses only essential cookies required to operate. We do not use third-party tracking, advertising pixels, or behavioral analytics by default. If we add analytics later, this page and a cookie banner will be updated and your consent requested first.

8. Security

We use HTTPS, restrict access to guest records to authorized staff, and follow standard practices for password and account protection. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of guest information.

9. Changes to this notice

We may update this notice from time to time. Material changes will be communicated via our website or directly to guests with active reservations.

Template note for the property: this notice is a structural template based on PDPA principles for Thai accommodation providers. Have it reviewed by Thai counsel and customized to reflect the property's actual practices, retention schedules, processors, and OTAs (online travel agencies) before publication.