Privacy Policy
Cập nhật lần cuối: 2026-07-31
This policy explains what personal data Cosy Phangan collects, why, and what rights you have. It follows the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA").
Data controller
Cosy Phangan, Koh Phangan, Surat Thani, Thailand. Contact for any data matter: info@cosyphangan.com.
What we collect
- Language preference — stored in your browser so the site opens in your language.
- Technical request data — IP address, browser type, time of request. Kept in server logs for security and troubleshooting.
- Data you send us — if you write to us or submit a data request: your name, contact details and the content of your message.
We do not use advertising or analytics trackers, and we do not sell or share your data for marketing.
Why we process it
- To operate and secure the website (legitimate interest).
- To answer your enquiries and fulfil your requests (contract / your consent).
- To meet legal obligations, including responding to data subject requests under the PDPA.
How long we keep it
- Server logs — up to 90 days.
- Correspondence and data requests — up to 24 months after the matter is closed, then deleted.
- Language preference — until you clear your browser storage.
Who else can see it
Data is stored on our own server in Singapore (DigitalOcean). We do not sell data. It may be disclosed only to Thai authorities where the law requires it.
How we protect it
Traffic is encrypted (TLS). Backups are encrypted before leaving the server. Access is limited to the operator of the resort. Databases are not exposed to the internet.
Your rights
Under the PDPA you have the right to:
- be informed how data is used
- access your data and get a copy
- have inaccurate data corrected
- have your data erased
- restrict or object to processing
- receive your data in a portable format
- withdraw consent at any time
- lodge a complaint with the Personal Data Protection Committee (PDPC), Thailand
To exercise any of these, use the data request form or write to info@cosyphangan.com. We reply within 30 days, as required by the PDPA.