Skip to content
Amber KataBoutique Pool Villa
Message us on WhatsApp

Privacy Policy

DRAFT — pending legal review. This page sets out how Astra Asset Advisor Co., Ltd. handles personal data collected through this website, under Thailand's Personal Data Protection Act (PDPA) and, for visitors in the EU/EEA and the UK, the GDPR.

1. Who is responsible

The data controller is Astra Asset Advisor Co., Ltd.. For any privacy request, contact [email protected].

2. What we collect and why

  • Enquiry details you enter: name, WhatsApp number or email address, dates, number of guests and your message. Purpose: to quote for and to arrange your stay. Legal basis: steps taken at your request before entering into a contract.
  • Technical data your browser sends: IP address, user agent and pages viewed. Purpose: security, rate limiting and basic traffic counts. Legal basis: our legitimate interest in keeping the site working and free from abuse.
  • Analytics cookies: loaded only after you accept them. Maps: the location maps on this site are provided by Google and load as soon as the page opens, which sends your IP address and the address of the page you are viewing to Google.
  • Agent registrations: company, contact person, email address, telephone number and country. Purpose: to verify a trade partner and to apply agent rates.

3. What we do not collect

We do not ask for passport, identity document or payment card details through this website. We do not buy contact lists, and we do not sell or rent your data to anyone.

4. Who else sees it

  • Our hosting provider, which stores the site and its database.
  • Email and messaging providers, when you choose to contact us by those means.
  • The property management system used to record a confirmed booking.
  • Google, which serves the embedded location maps on this site.
  • Analytics providers, only if you accepted analytics cookies.

5. How long we keep it

Enquiries that do not become bookings are retained for a limited period and then deleted. Bookings are retained for as long as Thai accounting and tax law requires. Exact retention periods are to be set with counsel.

6. Your rights

You may request a copy of your data, ask us to correct or delete it, object to processing, or withdraw your consent to cookies at any time. Write to [email protected]. Under the PDPA you may also complain to Thailand's Personal Data Protection Committee; in the EU/EEA or the UK you may complain to your national supervisory authority.

7. International transfers

Some of our providers are located outside Thailand. Where that is the case, we rely on the safeguards those providers offer. This section is to be completed with counsel once the provider list is final.

8. Changes

If this policy changes, we will update the date shown at the foot of this page.