Privacy Policy

1. Information We Collect

When you contact us or make a booking, we may collect:

• Your full name and nationality
• Email address and telephone number
• Passport or ID number (required by Thai guesthouse licensing law)
• Flight arrival and departure details
• Payment card details (processed securely; not stored on our systems)
• Website usage data via cookies (see Section 5)

Legal basis: Contract performance, legal obligation (guest registration required under Thai law) and, where applicable, your consent.

Retention: Guest registration records are held for five years as required by Thai guesthouse regulation. Marketing consent records are held for three years. Website enquiry data is held for two years.

2. How We Use Your Information

• To confirm and manage your room booking
• To arrange the airport shuttle at the agreed time
• To complete legal guest registration as required by Thai law
• To contact you with pre-arrival or departure information
• To respond to enquiries submitted through our website
• To improve our website and understand how visitors find us (analytics only, with your consent)

We do not sell personal data. We do not share it with third parties for marketing purposes. We do not send marketing communications without your explicit consent.

3. How We Protect Your Data

Guest registration records held at the property are stored in a locked cabinet accessible only to duty staff. Digital records are held on password-protected systems. Payment transactions are processed through a third-party card terminal; card data is not stored on our premises or servers.

In the event of a data breach that affects your personal information, we will notify you and the relevant Thai supervisory authority within the timescale required by the PDPA.

4. Third-Party Services

We may share data with the following categories of third party where necessary to deliver our service:

• Thai immigration and tourism authorities (mandatory guest registration)
• Payment card processing providers (for card transactions only)
• Website analytics services (with your cookie consent)

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

5. Cookies

Our website uses essential cookies to function correctly, and optional analytics and preference cookies with your consent. You can manage cookie preferences at any time through our Cookie Policy page.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion (subject to legal retention requirements)
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Children

Our website and booking process are intended for use by adults aged 18 and over. We do not knowingly collect personal data from minors. Children may stay at Lanna Ruen as part of a family group booked by a responsible adult.

8. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page with the date of last revision shown at the top. Continued use of our website or services after an update constitutes acceptance of the revised policy.

9. Contact for Data Enquiries