Privacy policy

Data controller

The data controller is Phangan Fantasy Co., Ltd, the site editor named in the legal notice. For any request, contact phanganfantasy@gmail.com.

Data we collect

We collect only what the booking requires:

• Name, email and phone: to identify you, confirm the booking and reach you about your stay.
• Dates and the number of adults and children: to price and hold your stay.
• Amount paid and the Stripe payment reference: to record and prove the payment.
• Your free-text requests: to prepare your stay. See the note on this field below.
• The IP address of the booking request: to prevent abuse of the booking form.

Card data

Your card details never reach our servers. They are entered and processed directly by Stripe.

Processors

We rely on these providers, each acting on our instructions:

• Vercel Inc. (United States): hosting and running the site.
• Supabase (Singapore): the database that holds your booking.
• Stripe: payment processing.
• Vercel Web Analytics (United States): anonymous, cookie-free audience measurement, on the public site only.
• Airbnb, through iCal calendar synchronisation: exchanges busy dates only, with no personal data.

Transfers outside the European Union

Our database is hosted in Singapore and some providers are in the United States, both outside the European Union. If you are an EU resident, your data is therefore transferred outside the EU.

Retention

• Booking data: 5 years, to meet Thai accounting and tax obligations.
• The confirmation-PDF download token: 30 minutes, single use, stored hashed.
• Audience measurement: 12 months.

Cookies and audience measurement

The public site sets no non-essential cookie. Audience measurement uses Vercel Web Analytics, which is cookie-free and stores no personal data, so no consent banner is required. The only cookies used are those strictly necessary for the private admin area.

Exterior video surveillance

The property has exterior security cameras covering the access and the immediate surroundings only, for the security of the premises. There is no camera inside the villa or in the private areas guests occupy. Footage is recorded on a secured local system and kept for 30 days, after which it is automatically overwritten.

Your rights

You have the right to access, rectify, erase, object to the processing of, and port your data. To exercise these rights, contact phanganfantasy@gmail.com.

Applicable frameworks

The editor is subject to the Thai Personal Data Protection Act (PDPA). Visitors resident in the European Union are covered by the GDPR. We aim to respect both; we do not claim full compliance.