Privacy Policy
Last Updated: December 2025
1. Introduction
Welcome to Maya Resort Samui. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or stay at our resort, in compliance with the Personal Data Protection Act (PDPA) of Thailand and international standards.
2. Who We Are (Data Controller)
The Data Controller responsible for your personal data is the legal operating entity of the resort:
Maya Resort Co., Ltd.
Registration ID: 0-8455-59007-11-3
Head Office Address: 3/56 Moo 1, Bophut, Koh Samui, Surat Thani, Thailand, 84320
Email for privacy concerns: info@mayaresortsamui.com
3. How We Collect Data
We collect information in the following ways:
- Directly: When you book through our website, contact us via email, chat, or check-in at the front desk.
- Through Third Parties (OTAs): When you book via platforms like Booking.com, Agoda, Expedia, Airbnb, etc.
- Automatically: Through cookies when you browse our website.
4. The Role of Cloudbeds
To ensure a seamless booking experience, we use Cloudbeds, a unified hospitality management software. Regardless of where you book (Agoda, Booking.com, or our website), your reservation data is securely processed and stored within the Cloudbeds system. Cloudbeds acts as a Data Processor on our behalf and complies with high-level security standards (PCI DSS, GDPR, and PDPA).
5. What Data We Collect
- Identity Data: Name, surname, passport details (strictly required by Thai Immigration law and Resort Policy).
Note: As per our Terms and Conditions, failure to present a valid ID/Passport upon check-in will result in denial of accommodation. - Financial Data: Credit card details. For online reservations, we may require you to present the physical credit card used for booking upon check-in for fraud prevention.
- Contact Data: Phone number, email address.
- Stay Details: Arrival/departure dates, special requests.
- Family & Children Data: Since we are a family resort, we may record the names and ages of children to prepare age-appropriate amenities (cribs, high chairs, etc.). This data is collected solely for service provision.
6. Why We Use Your Data
- To process your reservation and payment.
- For Identity Verification & Fraud Prevention: To ensure the person checking in matches the ID and credit card holder on the booking (as strictly stated in our Terms & Conditions).
- To comply with Thai Laws (reporting to the Immigration Bureau).
- To communicate with you regarding your stay (check-in instructions, transfer arrangements).
- To improve our services based on guest feedback.
7. Data Sharing
We do not sell your data. We only share it with:
- Cloudbeds: Our central reservation system.
- Thai Authorities: Immigration Bureau (required by law for all hotels in Thailand).
- Payment Gateways: To process transactions securely.
8. Cookies & Google Analytics
Our website uses cookies and third-party analytics tools to improve functionality and analyze traffic.
- Cookies: Small text files stored on your device to remember your preferences. You can adjust your browser settings to decline cookies.
- Google Analytics: We use Google Analytics to understand how visitors interact with our website. This tool collects technical data (e.g., browser type, device, pages visited). This data is aggregated and anonymized; it does not identify you personally.
If you prefer not to be tracked by Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.
9. Cookies
Our website uses cookies to improve functionality and analyze traffic. You can adjust your browser settings to decline cookies, though some site features may not function properly.
10. Your Rights
Under the PDPA, you have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (unless we are required by law to keep it, e.g., for tax or immigration purposes).
To exercise these rights, please contact us at info@mayaresortsamui.com.