Privacy Policy

policy
ระเบียบการใข้สระว่ายน่ำ

 

Privacy Policy (PDPA-Compliant) – Maison de Joy Khao Yai

1. Who We Are

Maison de Joy Khao Yai (“we”, “our”, “the resort”) operates the website:
https://maisondejoykhaoyai.com

This Privacy Policy explains how we collect, use, store, and disclose your personal data in accordance with the Thailand Personal Data Protection Act (PDPA) and other applicable laws.

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Data You Provide Directly

  • Name, phone number, email address

  • Booking details and stay preferences

  • Comments or information you submit through forms

  • Media files you upload (please avoid EXIF GPS location data)

2.2 Automatically Collected Data

  • IP address

  • Browser type and version

  • Cookies and usage information

  • Device information and log data

2.3 Data from Third Parties

  • Payment service providers

  • Spam detection and analytics providers

  • Gravatar (for comment avatars)

3. Comments

When visitors leave comments on our website, we collect the data shown in the comment form, the visitor’s IP address, and browser user agent for spam detection.

An anonymized hash of your email may be shared with Gravatar to check if you use the service. Gravatar’s Privacy Policy:
https://automattic.com/privacy/

After approval, your profile picture will be publicly visible alongside your comment.

4. Media Uploads

If you upload images, please ensure they do not contain location data (EXIF GPS) as other visitors may download and extract such data.

5. Cookies

We use cookies to improve user experience and website functionality. This may include:

  • Saving your name/email when leaving comments (valid for 1 year)

  • Temporary cookies for login pages

  • Login cookies (last for 2 days)

  • Screen display preference cookies (last for 1 year)

  • “Remember Me” login persistence (2 weeks)

  • Article edit cookies (expire after 1 day)

You may disable cookies in your browser settings; however, some features may not function properly.

6. Embedded Content from Other Websites

Articles on our site may include embedded content (videos, images, etc.) that behaves as if you visit the external website directly.

These websites may collect:

  • Tracking data

  • Cookies

  • Analytics

  • Interaction data

The processing of your personal data on those platforms is governed by their own privacy policies.

7. Purposes of Collecting and Using Personal Data (PDPA Section 23)

We collect your personal data for the following purposes:

  • Processing room reservations and guest services

  • Managing check-in, check-out, and stay records

  • Customer communication and support

  • Improving our website and guest experience

  • Security, fraud prevention, and spam detection

  • Legal compliance and internal audits

  • Marketing communications (only with your consent)

8. Legal Basis for Processing (PDPA Section 24 & 26)

We process personal data based on:

  • Contractual necessity (booking & services)

  • Legal obligations (tax, accounting, security)

  • Legitimate interests (service improvement, security)

  • Explicit consent (marketing, promotions, optional subscriptions)

9. Who We Share Your Data With

We may share your personal data with:

  • Website hosting providers

  • Spam detection services

  • Payment processors

  • Hotel property management systems

  • Government authorities (where legally required)

If you request a password reset, your IP address will appear in the reset email.

We do not sell your data to any third party.

10. How Long We Retain Your Data

  • Comments and metadata: indefinitely, for recognition of follow-up comments.

  • Registered user profiles: stored as long as the account is active.

  • Booking and stay records: retained for the period required by Thai law (typically 5–10 years).

  • Cookies: retained according to the durations stated above.

11. Your Rights Under PDPA

You have the right to:

  • Access your personal data

  • Request a copy of your data

  • Correct or update your information

  • Withdraw consent at any time

  • Request deletion of your personal data

  • Object to certain types of processing

  • Request data portability

To exercise your rights, please contact us using the details provided below.

12. Data Transfers

Some service providers may store data on servers located outside Thailand. We ensure all transfers comply with PDPA and international data protection standards.

13. Data Security

We implement appropriate technical and organizational measures to protect your data from loss, unauthorized access, or misuse.

However, no data transmission over the internet can be entirely secure, and we cannot guarantee absolute protection.

14. Automated Spam Detection

Visitor comments may be scanned using automated spam detection tools.

15. Contact Information (DPO / Data Controller)

If you have any questions regarding this Privacy Policy or wish to exercise your PDPA rights, please contact:

Maison de Joy Khao Yai – Data Protection Officer (DPO)
Email: maisondejoy.hq@gmail.com
Phone: 099 320 7101
Address: Maison de joy villa khaoyai , 99 M.2 Pak Chong, Thailand, Nakhon Ratchasima, Thailand

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.