Skip to content

Privacy policy

Last updated 17 October 2026

This policy explains what personal data Samui Dream Villas (“we”, “us”) collects through this website, why, who we share it with and the rights you have. We follow Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

Who we are

Samui Dream Villas, Ban Maenam, Koh Samui, 84330 Surat Thani, Thailand. We are the data controller for the personal data described here. You can contact us about your data at info@samui-dream-villas.com.

What we collect

When you send an enquiry

  • Your name and email address (required).
  • Your phone or WhatsApp number, travel dates, number of guests and your message (optional — only what you choose to tell us).
  • Which villa you asked about and the price shown at the time, plus the currency you were viewing prices in.

When you book and pay a deposit

  • Your name, email, phone number (optional), travel dates, number of guests, any note you add, any optional extras you ask for, the amounts and how you chose to pay.
  • If you pay by PayPal, Revolut, Wise or bank transfer, you send the money through that service yourself; we see the payment, the name on it and the booking reference, as with any transfer. Each service’s own privacy policy applies to what you give it.
  • Card payments are handled entirely by Stripe on its own secure page. We never see or store your card number; Stripe tells us only whether the payment succeeded and a payment reference.

Automatically

  • Your IP address is used briefly to protect our forms from spam and repeated attempts. It is held in memory only and not saved to our database. Our hosting provider may keep standard server logs for security.
  • We do not use analytics, advertising or tracking cookies. See our cookies page for the few items we do use.

Why we use it

  • To answer your enquiry and arrange your stay — taking steps at your request before entering into a contract, and performing that contract.
  • To take and record your deposit — performing the contract and meeting our accounting and tax obligations.
  • To keep the website secure and stop spam — our legitimate interest in running a safe service.

We don’t sell your data, and we don’t send marketing emails unless you have asked us to.

Who we share it with

We share only what is needed to arrange your stay:

  • The villa’s owner or manager — your name, dates and number of guests, so the villa can be prepared for you.
  • Service providers who run the website for us under contract, and only on our instructions:
    • Hostinger — Hosts the website. (Server location chosen in the hosting account)
    • Supabase — Stores villa details, enquiries and bookings in a secure database. (Singapore)
    • Resend — Sends the emails about your enquiry or booking. (United States)
    • Stripe — Takes card payments for booking deposits. We never see or store your card details. (Worldwide (Stripe’s data centres))
    • OpenStreetMap — Provides the map images; your browser requests them from OpenStreetMap’s servers, which see your IP address. (Worldwide (OpenStreetMap Foundation))
    • Google Fonts — Provides the website’s fonts; your browser requests them from Google, which sees your IP address. (Worldwide (Google))
  • Authorities where the law requires it — for example, guest registration rules in Thailand.

Some of these providers are outside Thailand. Where your data leaves Thailand we rely on providers with appropriate safeguards for personal data, as the PDPA requires.

How long we keep it

  • Enquiries that don’t lead to a booking: up to 2 years after our last contact, then deleted.
  • Bookings and payment records: as long as Thai accounting and tax law requires (currently 5 years).
  • You can ask us to delete your data sooner — see below.

Your rights

Under the PDPA you can ask us to:

  • give you a copy of the personal data we hold about you, or send it to another organisation;
  • correct anything that is wrong or incomplete;
  • delete it, or stop or restrict how we use it;
  • object to us using it, and withdraw any consent you have given.

Contact us at info@samui-dream-villas.com and we’ll reply within 30 days. If you’re unhappy with our answer you can complain to Thailand’s Personal Data Protection Committee (PDPC).

Security

The whole site uses an encrypted (https) connection. Our database is accessible only from our own server, staff areas are password-protected, and card details never reach us at all.

Children

Bookings must be made by adults. We don’t knowingly collect data from children under 18.

Changes to this policy

If we change how we use your data we’ll update this page and the date at the top.