Privacy Policy

Who is responsible for your data

The data controller is Pattara Resort & Spa, 349/40 Chaiyanupap Road, Nai Mueang, Mueang Phitsanulok, Phitsanulok 65000, Thailand. The resort is operated by Phattarapinyoh Co., Ltd. (Branch 2).

For any question or request about your personal data, email rsvn@pattararesort.com or call 055 282 966.

What we collect and why

• When you contact us by phone, email, LINE or Facebook, or ask about a meeting or wedding: your name, phone number, email address or messaging account, your message, and the details of the stay or event you ask about. We use them to answer you, prepare a quotation and follow up. Legal basis: steps taken at your request before a contract, and our legitimate interest in replying to you.
• When you book a room: the “Book Now” buttons open the booking engine of hoteliers.guru, a separate company, where you enter your booking and payment details under that company’s own privacy notice. The resort receives the details needed for your stay: name, contact details, dates, room type and special requests. We use them to hold and prepare your room, contact you about the booking, and issue receipts. Legal basis: performance of a contract and our legal obligations (hotel guest registration, accounting and tax law).
• When you visit the website: the site is delivered through Cloudflare, whose servers record technical data such as your IP address, browser type, the pages requested and the time, to keep the site secure and running. Legal basis: our legitimate interest in running a safe website. Fonts and images are served from the site itself; no third-party fonts, maps or videos are embedded.
• Measurement cookies, only if you accept them: see the next section.

Cookies and measurement

On your first visit a banner asks whether we may measure how the site is used. Nothing from Google is loaded unless you choose “Accept”.

• If you accept, the site loads Google Tag Manager and Google Analytics 4, services of Google LLC. Google Analytics sets cookies named _ga and _ga_… in your browser for up to two years and records the pages you view, the buttons and links you tap (Book Now, Call, LINE, Directions, email, Facebook), your device and browser type, and an approximate location derived from your IP address, which Google Analytics does not store. We use these reports to see which pages and offers guests find useful. Google processes the data on its own servers, which may be outside Thailand, including in the United States.
• Your choice is remembered in your browser’s local storage (key “ptr-consent”) so we do not ask again. You can change it at any time from “Cookie settings” at the bottom of every page. If you decline later, Google’s cookies are deleted and the measurement tools are not loaded on your next visits.
• The site sets no cookies of its own; Cloudflare may set technical cookies needed for security. Legal basis for measurement: your consent.

• Google Privacy Policy
• How Google uses information from sites or apps that use our services

Who we share data with

• hoteliers.guru, the booking engine: online booking and payment.
• Google: measurement, only after your consent.
• Cloudflare, Inc.: hosting and delivery of the website.
• LINE and Meta (Facebook, Instagram): when you choose to contact us through those services, under their own privacy notices.
• Government authorities, when the law requires it, for example hotel guest registration and tax.

We do not sell personal data and do not use it for automated decisions. Where data leaves Thailand, for example to Google or Cloudflare, we share only what the service needs, and the recipient is bound by its own data-protection commitments.

How long we keep data

• Enquiries: for as long as needed to answer and follow up, then deleted.
• Booking and stay records: for as long as hotel, accounting and tax law require.
• Measurement data: for the retention period set in our Google Analytics account. Your cookie choice stays in your browser until you change or clear it.

Your rights

Under the PDPA you may ask to access or receive a copy of your personal data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (withdrawing does not affect what was done before). Email rsvn@pattararesort.com or call 055 282 966; we may ask you to confirm your identity first. You may also complain to the Office of the Personal Data Protection Committee (PDPC), Thailand.

Security

The website is served over HTTPS. We limit access to booking and enquiry data to the staff who handle them.

Changes to this notice

We may update this notice from time to time; the date at the top shows the current version.