Privacy Policy

1. Introduction

Orchid Manor ("we," "our," or "us") operates property rental services in Bangkok, Thailand. This Privacy Policy explains how we collect, use, protect, and handle your personal information in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA).

By using our services or providing personal information to us, you consent to the practices described in this policy. If you have questions regarding data handling, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

When you inquire about or book our properties, we collect:

• Full name and contact information (email address, phone number)
• Booking details including property selection, dates, and special requirements
• Payment information processed through secure third-party systems
• Correspondence and communication records with our staff
• Any additional information you voluntarily provide during property viewings or stays

2.2 Automatically Collected Information

Our website may collect:

• Device and browser information including IP address and operating system
• Website usage data through cookies and similar technologies
• Pages visited, time spent on pages, and navigation patterns
• Referring website and search terms used to find our site

3. Legal Basis and Purpose of Processing

We process personal data based on the following legal grounds:

3.1 Contractual Necessity

Processing necessary to fulfill rental agreements, arrange property viewings, coordinate bookings, and provide customer support during stays.

3.2 Legitimate Interests

Processing for business operations including property management coordination, quality assurance, and service improvement, balanced against privacy rights.

3.3 Consent

Processing for marketing communications, property updates, and promotional materials where you have provided explicit consent, which may be withdrawn at any time.

3.4 Legal Compliance

Processing required to comply with Thai legal obligations including tax record-keeping, property safety regulations, and government reporting requirements.

4. How We Use Your Information

We use collected information for the following purposes:

• Processing property bookings and managing rental agreements
• Coordinating property viewings and answering inquiries
• Providing customer support during stays and addressing concerns
• Processing payments and maintaining financial records
• Communicating about bookings, property details, and service updates
• Improving our property selection and service quality
• Sending marketing communications (only with your consent)
• Analyzing website usage to enhance user experience
• Complying with legal and regulatory requirements

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Third-party service providers who assist with payment processing, website hosting, email communications, and property maintenance coordination. These providers are contractually obligated to protect your information.

5.2 Property Owners

Property owners receive necessary booking information including names, contact details, and stay dates to prepare properties and coordinate access.

5.3 Legal Authorities

Government agencies when required by Thai law, including tax authorities, property registration offices, and law enforcement responding to valid legal requests.

We do not sell personal information to third parties for their marketing purposes.

6. Data Security

We implement security measures to protect your personal information:

• Encrypted data transmission using SSL/TLS protocols
• Secure data storage with access controls and authentication
• Regular security assessments and system updates
• Staff training on data protection and privacy practices
• Confidentiality agreements with all employees and contractors

However, no internet transmission or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain personal information for specific periods based on purpose:

• Booking records: 7 years from transaction completion (Thai tax law requirement)
• Communication records: 3 years from last interaction
• Marketing consent records: Until consent is withdrawn
• Website usage data: 24 months from collection

After retention periods expire, we securely delete or anonymize personal information unless longer retention is legally required.

8. Your Rights Under Thai PDPA

You have the following rights regarding your personal data:

• Right to Access: Request copies of personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by Thai law. We may request identification verification before processing requests.

If you believe we have violated your privacy rights, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyze usage. For detailed information about cookie types, purposes, and management options, please see our Cookie Policy.

10. International Data Transfers

Your personal information is primarily stored and processed in Thailand. If data transfers outside Thailand are necessary (for example, to cloud service providers), we ensure appropriate safeguards are in place as required by Thai law, including contractual protections and security measures.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18 without parental consent, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the revised policy on our website with an updated "Last Updated" date. Significant changes will be communicated via email to registered users or through website notices.

Continued use of our services after policy changes indicates acceptance of the revised terms.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: