Privacy & Cookie Policy
Template notice — this policy is a starting point tailored to this website. Replace the bracketed placeholders with your legal details and have it reviewed by a qualified adviser (Thailand PDPA, and GDPR if you market to the EU/UK) before you publish it. It is not legal advice.
This Privacy & Cookie Policy explains how [KIRIVA legal entity name] (“KIRIVA”, “we”, “us”) collects, uses, shares and protects your personal data when you visit this website or contact us about our villas, and the choices you have. We are the data controller responsible for your personal data.
1. Who we are
- Company: [KIRIVA legal entity name], [company registration no.]
- Address: [registered address, Koh Samui, Surat Thani, Thailand]
- Email: info@kirivasamui.com
- Phone: +66 81 969 9622
- Data protection contact: [name / email of DPO or responsible person]
2. Information we collect
Information you give us
When you submit the enquiry form (“Request private access”) or contact us, we collect:
- Your name;
- Your phone number and email address;
- Your indicated budget range;
- Any message or details you choose to provide.
Information collected automatically
With your consent (see “Cookies” below), we and our analytics/advertising providers collect technical information such as your device and browser type, approximate location, pages viewed, referring source, and interactions with the site (for example submitting the form). Strictly necessary storage — such as remembering your cookie choice — is used without consent because the site cannot function correctly without it.
3. How we use your information
- To respond to your enquiry and provide the brochure, pricing and reservation details;
- To contact you about KIRIVA villas and, where you have agreed, related marketing;
- To measure and improve the website and understand which content is useful;
- With your consent, to measure and optimise our advertising (for example Google Ads);
- To comply with legal obligations and protect our rights.
4. Legal bases
Depending on the applicable law, we rely on:
- Consent — for analytics and advertising cookies, and for marketing communications. You may withdraw consent at any time.
- Performance of steps at your request — to respond to your enquiry.
- Legitimate interests — to run and secure our business and website, where these are not overridden by your rights.
- Legal obligation — where we must retain or disclose data by law.
5. Cookies & tracking
We use cookies and similar technologies in the following categories:
- Strictly necessary — e.g. storing your cookie preference. Always active.
- Analytics — Google Analytics 4, to understand how the site is used. Loaded only after you accept.
- Advertising / marketing — Google Ads, to measure and personalise advertising. Loaded only after you accept.
We use Google Consent Mode v2: analytics and advertising storage default to denied, and no such cookies are set until you choose Accept in the cookie banner. If you choose Decline, we do not set analytics or advertising cookies; Google may still receive aggregated, cookieless measurement signals.
Managing your choice
You can change your mind at any time by clearing this site’s data in your browser (which resets the banner), or by adjusting your browser’s cookie settings. You can also opt out of Google Analytics using Google’s opt-out browser add-on.
6. Sharing your information
We share personal data only where necessary, with:
- Service providers who help us run the site and our sales process (e.g. hosting, email, CRM), under appropriate agreements;
- Google, as the provider of Analytics and Ads, where you have consented (see Google’s Privacy Policy);
- Authorities or advisers where required by law or to protect our rights.
We do not sell your personal data.
7. International transfers
Some providers (such as Google) may process data outside Thailand. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection as required by applicable law.
8. Data retention
We keep enquiry data for as long as needed to respond to you and manage our sales relationship, and thereafter only as required for legal or legitimate business purposes, after which it is deleted or anonymised. Analytics data is retained per our provider’s configured retention period.
9. Your rights
Subject to applicable law (Thailand PDPA, and GDPR where relevant), you may have the right to:
- Access a copy of your personal data;
- Correct inaccurate or incomplete data;
- Delete your data or restrict/object to its processing;
- Withdraw consent at any time (without affecting prior processing);
- Data portability;
- Lodge a complaint with a supervisory authority — in Thailand, the Personal Data Protection Committee (PDPC).
To exercise any right, contact us at info@kirivasamui.com.
10. Security
We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
11. Children
This website is not directed to children, and we do not knowingly collect their personal data.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was last revised; material changes will be highlighted on this page.
13. Contact us
Questions about this policy or your data? Email info@kirivasamui.com or call +66 81 969 9622.