Sarana complies with the 2019 Personal Data Protection Act of Thailand, which regulates the processing of personal data related to you and grants you various rights in respect of your personal data.
Categories of Personal Data We Collect
- Personal Data — title, first name, surname, age, occupation, date of birth, gender, nationality, marital status, photo, video, signature, CCTV footage, and record of access to various facilities within the resort.
- Contact Data — address on census, current address, office address, postal code, telephone number, business phone number, mobile number, email, social media account name (e.g. Line ID, Facebook, Instagram, WhatsApp, WeChat, Telegram and time available for contacting) and other electronic means of contact.
- Government-issued Personally Identifiable Data — citizen ID number, passport number, driver’s licence number, census, and other similar information.
- Demographic Data — children and their ages, number of family members.
- Financial Data — method of payment (e.g. cash or credit), credit/debit card number, PromptPay ID, bank account number and account type.
- Data Collected from Guests’ Electronic Devices — IP address, time spent on our website, cookies, search history, browsing data, chat history on webpage and other applications, browser type and version, time zone and location settings, plug-in browser version and type, operating system, and other technologies on members’ devices used to access the platform.
- Other Data Provided by Using Our Services — personal data provided in questionnaires, surveys, feedback forms, and other activities.
- Personally Identifiable Information from CCTV Footage and Facial Recognition Devices — CCTV cameras within the property.
Where We Collect Personal Data
a. Booking a Room
When you book a room, we collect the following Personal Data:
- Your stay period
- Number of rooms in the reservation
- Number of people in the reservation (adults and children)
- Age of children
- The rate or special offer selected
- Any add-on packages selected
- Your full name
- Your address, including city and country
- Your email address
- Your credit card details
Optional information includes: frequent flyer information, arrival information, room and bed type preferences, and telephone or mobile number.
We use this Personal Data to handle your reservation and to establish and fulfil our contract with you. This includes verifying your identity, taking guarantee and/or payment information, and sending stay-related and/or marketing communications. We take the protection of your Personal Data very seriously and have kept the mandatory required fields to a minimum.
b. “Contact Us” Functionality
You may contact us through our website using the “Contact Us” form or by telephone. When reaching out, please provide your full name and email address. We will use the provided information solely to respond to your inquiry.
c. Cookies
We use cookies on our website. Cookies are small text files sent by a web server to your browser and saved locally on your device. They allow the server to uniquely identify your browser across pages. Cookies do not harm your device and do not contain viruses.
We use the following categories of cookies:
- Strictly Necessary Cookies — essential for site navigation and core features such as remembering login details or booking data. These cannot be disabled.
- Performance Cookies — collect anonymised information on how visitors use our site (e.g. Google Analytics) to help us improve navigation and the booking experience. No personally identifiable data is stored.
- Functionality Cookies — remember choices such as country, language, number of guests, and dates, to provide a more personalised experience.
You can enable or disable cookies through your browser settings. For more information, visit www.allaboutcookies.org. For interest-based advertising opt-out options, visit youronlinechoices.eu. Please note that disabling certain cookies may affect your ability to use parts of our website.
Purposes for Collecting, Using, and Disclosing Personal Data
- To contact and communicate with guests — coordinating services, providing promotional information and privileges, processing requests, feedback, and complaints, resolving technical issues, and conducting satisfaction surveys. Guests may unsubscribe from marketing communications at any time.
- To maintain, operate, monitor, and manage the website and platform to ensure smooth, effective, and secure operation, and to improve planning and content.
- To facilitate overall security within Sarana premises.
Rights of Data Subjects
Guests may request that Sarana correct inaccurate data or add to incomplete data, and may request withdrawal of data to which they have not consented. All requests must be made in accordance with the laws of Thailand.
In respect of the collection and use of your personal data, you may:
- Ask us whether we process Personal Data about you, for which purposes, the categories of data concerned, and to which recipients it has been disclosed.
- Inquire about the appropriate safeguards relating to any transfer of your data to a third party.
- Request a copy of your Personal Data in a structured, commonly used, and machine-readable format.
- Have inaccurate data rectified.
- Object to further processing and request erasure of your Personal Data.
- Request that processing of your personal data is restricted by Sarana.
- Request not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
For any questions or to exercise your rights, please contact us.
Sharing Personal Data
Your Personal Data may be shared with:
- Commercial partners in the event that you book an activity or event organised by such partners.
- Third-party service providers who process data on our behalf — including hosting providers and providers of data analysis and IT services. All data processing on our behalf complies with applicable law.
- Government authorities, as required by law.
We will not transfer your personal data to third-party recipients without your consent or as otherwise permitted under applicable law.
Security Measures
We maintain appropriate standards of security and have implemented robust technical and organisational measures to protect your Personal Data against loss, falsification, or access by unauthorised parties. For the transfer of sensitive data via the internet — such as credit card details — we exclusively use encrypted transmission routes and comply with the Payment Card Industry Data Security Standards (PCI DSS).
However, transmission of information via the internet is not completely secure. While we take every precaution to protect your personal data, we cannot guarantee the absolute security of data transmitted to our website. Any transmission is at your own risk. Once received, we use strict procedures and security features to prevent unauthorised access.
Retention and Deletion of Personal Data
Personal data associated with your Sarana guest profile — including full name, number of guests, date of birth, contact information, stay frequency and duration, transportation preferences, allergies, and specific requests — will be securely stored unless you explicitly request its removal.
Personal data not associated with a guest profile, such as credit card details, will be retained only for as long as necessary to fulfil the purposes for which it was collected, after which it will be erased.
Where we process personal data for marketing purposes or with your consent, we will process the data until you ask us to stop, and for a short period thereafter to implement your request. We also retain a record of opt-out requests to ensure we respect your preferences in future.
In other cases, we may retain data for an appropriate period after any relationship with you ends, to protect ourselves from legal claims or to administer our business.
Updates
This Privacy Policy may be updated periodically. We will update the date at the top of the page accordingly and encourage you to check for any changes. Please contact us with any questions regarding our privacy policy.