Privacy Policy

1. Introduction

Maliwan House ("we", "us", "our") is a guesthouse located at 127/4 Moo 6, Racha Thewa, Bang Phli, Samut Prakan 10540, Thailand. We take the handling of your personal data seriously and are committed to protecting your privacy in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable data protection principles.

This policy explains what information we collect, why we collect it, how we use it and what rights you hold with respect to your personal data. It applies to all guests, website visitors and individuals who contact us through any channel.

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name, nationality (for registration requirements under Thai law)
• Contact data: email address, telephone number
• Booking data: arrival and departure dates, room type, flight details, number of guests
• Payment data: transaction records (we do not store card numbers)
• Technical data: IP address, browser type, pages visited, collected via cookies and analytics tools

Data is collected when you:

• Submit an enquiry or booking request via our website contact form
• Email or call us directly
• Check in at the property (registration card)
• Browse our website (analytics and cookies)

Legal basis: We process personal data on the basis of your consent (for marketing), contract performance (for managing your stay), legal obligation (for registration requirements under Thai hospitality law) and our legitimate interest (for improving our services).

Retention: Booking and registration data is retained for 3 years as required under Thai tax and hotel registration regulations. Marketing consent data is held until withdrawn. Website analytics data is retained for 13 months.

3. How We Use Your Data

• Room and service management: to confirm bookings, coordinate shuttle schedules, prepare rooms and communicate about your stay
• Guest registration: to comply with Thai hotel registration law (names and nationality of guests must be recorded)
• Communication: to respond to enquiries sent via the contact form or by email
• Analytics: to understand how visitors use the website and improve usability (data is anonymised where possible)
• Legal compliance: to meet obligations under Thai law

We do not send unsolicited marketing communications. If you enquire about future bookings, we may follow up once. You may opt out at any time by replying to any email from us.

Third parties: We may share data with payment processors (for card transactions), Google Analytics (website data under their data processing terms) and logistics providers (shuttle drivers — only name and contact details, only on the day of travel). We do not sell personal data.

4. How We Protect Your Data

• Website data is transmitted over HTTPS (TLS encryption)
• Physical registration records are stored in a locked office accessible only to management
• Digital records are stored on password-protected, access-controlled systems
• Staff access to guest data is limited to those whose duties require it
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority within the timeframe required by Thai PDPA regulations

5. Cookies

Our website uses cookies to function properly and to understand how it is used. Essential cookies are required for basic site operation and cannot be declined. Optional cookies (analytics, preferences) require your consent, which you can give or withdraw via our cookie banner or the Cookie Policy page.

For full details of the cookies we use, their purposes and how to manage them, please read our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights with respect to your personal data held by Maliwan House:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to correct inaccurate data
• Right to erasure: to request deletion of your data (subject to legal retention obligations)
• Right to data portability: to receive your data in a machine-readable format where technically feasible
• Right to object: to object to processing based on legitimate interest
• Right to withdraw consent: at any time for processing based on consent, without affecting prior processing
• Right to lodge a complaint: with Thailand's Personal Data Protection Committee or the relevant supervisory authority in your country of residence

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites (such as flight information pages or map services). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.

8. Children

Our website is not directed at persons under 18. We do not knowingly collect personal data from minors through our website. Children may stay at the property as part of a family group; their data is collected as part of the booking record under the adult guest's name and subject to the same protections described in this policy.

9. Updates to This Policy

We may update this policy when our practices change or when required by law. The date at the top of this page reflects the most recent revision. Continued use of our website following an update constitutes acceptance of the revised policy.

10. Contact for Privacy Matters

For questions, requests or concerns regarding this policy or your personal data:

• Email: [email protected]
• Address: Maliwan House, 127/4 Moo 6, Racha Thewa, Bang Phli, Samut Prakan 10540, Thailand
• Phone: +66 2 738 6094