سياسة الخصوصية

1. INTRODUCTION

The Nai Harn Phuket is committed to protecting your personal data and ensuring that it is processed in accordance with applicable data protection laws, including the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“Thai PDPA”) and, where applicable, international data protection standards.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (www.thenaiharn.com), make a reservation, or interact with us in any way.

2. DATA CONTROLLER

The Nai Harn Phuket acts as the primary data controller for your personal data. In certain circumstances, we may act jointly with affiliated entities, including Leading Hotels of the World (LHW), for the purposes of reservation management, loyalty programs, and service delivery.

For any data protection inquiries, you may contact:

Data Protection Officer (DPO)
Email: dpo@thenaiharn.com
Address: 23/3 Moo 1, Vises Road, Rawai, Muang District, Phuket 83130, Thailand

3. PERSONAL DATA WE COLLECT

We collect personal data necessary to provide our services and enhance your experience. This includes:

3.1 Information You Provide

• Contact details (name, email address, phone number, mailing address)
• Payment information (credit card details, billing address, bank details)
• Reservation and stay information (arrival/departure dates, preferences, services used)
• Loyalty program details (e.g. Leaders Club membership)
• Communications and correspondence
• Preferences and interests

3.2 Automatically Collected Information

• IP address, browser type, device information
• Website usage data (pages visited, time spent, navigation patterns)

3.3 Information from Third Parties

We may receive personal data from:

• Travel agents and booking platforms
• Airlines and transportation providers
• Payment processors and financial institutions
• Marketing partners and analytics providers
• Public databases (where permitted by law)

3.4 Security and Surveillance Data

• CCTV footage in public areas of the hotel
• Key card usage and access logs

3.5 Sensitive Personal Data

In certain cases, we may process sensitive personal data such as:

• Food allergies and dietary requirements
• Health-related information relevant to your stay

We will only process such data where permitted by law and, where required, with your explicit consent.

4. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your personal data for the following purposes:

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your browsing experience and analyze website usage.

Types of Cookies We Use:

• Essential Cookies – necessary for website functionality
• Analytics Cookies – to understand user behavior (e.g. Google Analytics)
• Marketing Cookies – to deliver personalized advertisements

You can manage your cookie preferences through your browser settings or via our cookie consent tool on the website.

6. DISCLOSURE OF PERSONAL DATA

We may share your personal data with:

• Affiliated companies and LHW partners
• Travel agents or representatives acting on your behalf
• Service providers (IT systems, payment processors, marketing platforms)
• Analytics and advertising partners (e.g. Google, Meta)
• Legal and regulatory authorities when required

We do not sell your personal data.

All third parties are required to process your data securely and in accordance with applicable laws.

7. INTERNATIONAL DATA TRANSFERS

Due to the international nature of our operations, your personal data may be transferred to and processed in countries outside Thailand.

Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Data transfer agreements
• Transfers to jurisdictions with adequate data protection standards

8. DATA RETENTION

We retain personal data only as long as necessary for the purposes outlined in this policy, including:

• Guest records: up to 7 years (legal and tax requirements)
• Marketing data: until consent is withdrawn
• CCTV footage: typically 30 days
• Financial records: as required by law

When data is no longer required, it will be securely deleted or anonymized.

9. DATA SECURITY

We implement appropriate administrative, technical, and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

You are responsible for maintaining the confidentiality of your account credentials.

10. YOUR RIGHTS

Subject to applicable law, you have the following rights:

• Right to access your personal data
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with the Thailand Personal Data Protection Committee (PDPC)

To exercise your rights, please contact our Data Protection Officer.

11. CHILDREN’S DATA

We do not knowingly collect personal data directly from individuals under the age of 18 via our website. However, we may process minors’ data as part of a reservation, with the consent of a parent or legal guardian.

12. DATA BREACH NOTIFICATION

In the event of a data breach, we will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

13. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

14. CHANGES TO THIS POLICYS

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Your continued use of our website and services constitutes acceptance of the updated policy.

Updated on 11 May, 2026

15. CONTACT US

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer
Email: dpo@thenaiharn.com
Address: 23/3 Moo 1, Vises Road, Rawai, Muang District, Phuket 83130, Thailand