Privacy Policy

1. Introduction

Lumina Haven is committed to protecting the privacy and security of personal data collected through our website and rental services. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable international data protection standards.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about our data handling practices, please contact us at [email protected].

2. Data Controller Information

Lumina Haven
88/3 Sathorn Road, Silom, Bang Rak
Bangkok 10500, Thailand
Email: [email protected]
Phone: +66 2 627 3891

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Contact Information

• Full name
• Email address
• Phone number
• Mailing address (when provided for rental agreements)

3.2 Rental Information

• Property preferences and booking dates
• Group composition and special requirements
• Payment information (processed through secure third-party payment providers)
• Rental agreement details

3.3 Technical Data

• IP address and browser type
• Device information and operating system
• Website usage patterns and page views
• Cookie data (see our Cookie Policy for details)

3.4 Communication Records

• Email correspondence related to inquiries or bookings
• Phone call records for service coordination
• Feedback and satisfaction survey responses

4. How We Collect Your Data

• Directly from you when you complete inquiry forms, make bookings, or contact us
• Automatically through cookies and similar technologies when you use our website
• Through third-party platforms if you book through partner services
• During property stays through coordination interactions

5. Legal Basis and Purpose for Processing

We process your personal data based on the following legal grounds:

5.1 Contract Performance

Processing necessary to fulfill rental agreements, coordinate property access, arrange services, and complete transactions.

5.2 Legitimate Interest

Processing to improve our services, analyze website usage, prevent fraud, and maintain security of our properties and operations.

5.3 Consent

Processing for marketing communications, optional analytics, and non-essential cookies, where you have provided explicit consent.

5.4 Legal Obligation

Processing required to comply with Thai tax regulations, property rental laws, and other applicable legal requirements.

6. How We Use Your Data

• Processing rental inquiries and booking requests
• Coordinating property access, transportation, and provisioning services
• Communicating about your rental period and responding to questions
• Processing payments and maintaining financial records
• Sending service updates and important rental information
• Analyzing website performance and improving user experience
• Sending marketing communications (with your consent)
• Complying with legal and regulatory obligations

7. Data Sharing and Disclosure

We share your personal data only in the following circumstances:

7.1 Service Providers

We share data with trusted third parties who assist in delivering our services, including payment processors, transportation coordinators, property management services, and IT infrastructure providers. These parties are contractually obligated to protect your data and use it only for specified purposes.

7.2 Property Owners

Relevant booking information is shared with property owners to facilitate your rental period, including dates, group composition, and specific service requirements.

7.3 Legal Requirements

We may disclose data when required by Thai law, court orders, or governmental authorities, or to protect our legal rights and interests.

7.4 Analytics Services

We use Google Analytics and similar services to understand website usage patterns. These services collect anonymized data about visitor behavior.

8. Data Retention

We retain your personal data for the following periods:

• Inquiry data: 2 years from last contact if no booking is made
• Booking and rental data: 7 years following rental completion (for tax and legal compliance)
• Marketing consent records: Until consent is withdrawn
• Website usage data: 26 months
• Payment records: 7 years following transaction (for accounting purposes)

After these retention periods expire, we securely delete or anonymize your data unless longer retention is required by law or legitimate legal proceedings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure servers with regular security updates and monitoring
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Staff training on data protection requirements
• Secure backup systems with encryption

While we take reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security but continually work to maintain high protection standards.

10. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

10.1 Right to Access

You may request confirmation of what personal data we hold about you and obtain a copy of that data.

10.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

10.3 Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when there is no legal basis for continued processing.

10.4 Right to Data Portability

You may request your data in a structured, commonly used, machine-readable format for transfer to another service provider.

10.5 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

10.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site usage, and support our marketing efforts. For detailed information about our cookie practices, please review our Cookie Policy.

12. International Data Transfers

Your personal data is primarily stored and processed in Thailand. Some service providers we use may process data in other countries. When transferring data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by data protection authorities or certification under recognized privacy frameworks.

13. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe we have collected information about your child, please contact us immediately at [email protected].

14. Third-Party Links

Our website may contain links to third-party websites, including transportation services, local activity providers, or payment processors. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this policy indicates when changes were last made. We encourage you to review this policy regularly. Continued use of our services after changes indicates acceptance of the updated policy.

16. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware of the breach, in accordance with Thai PDPA requirements. We will provide information about the nature of the breach, likely consequences, and measures taken to address it.

17. Contact Information and Complaints

For questions, concerns, or to exercise your data protection rights, contact us:

Email: [email protected]
Phone: +66 2 627 3891
Mail: Lumina Haven, 88/3 Sathorn Road, Silom, Bang Rak, Bangkok 10500, Thailand

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or seek other legal remedies available under Thai law.