Introduction
This Privacy Policy explains our personal data practices and the choices you can make about the way your personal data is used.
Amperand Resort (“Ampersand Resort”, “us”, “our” or “we”) takes your privacy with utmost responsibility and care, and is committed to protecting the privacy, confidentiality and security of the personal information you provide to us or that we collect when you interact with our website, partner platforms, social media locations under our control, software applications available on computers as well as when you provide your personal information on the telephone or in person. Our privacy practices may vary among the countries in which we operate to reflect local & regional practices and legal requirements but are mainly derived from General Data Protection Regulation (GDPR) EU 679/2016.
Controller for processing data: Ampersand Resort, 9/132 Moo 5, Bophut, Koh Samui, Suratthani 84320, Thailand
Consent
You may be asked to consent to the terms of this Privacy Policy when making a reservation, or communicating with us on any medium, otherwise your continued use of the sites will constitute your deemed consent to the terms of this Privacy Policy.
Personal information we may collect
When using or interacting with our site on your own behalf or on behalf of others, we may collect personal information attributed to you or that allow your identification such as:
Full Name, date of birth, place of birth, passport details or visa details;
Home address;
Telephone number;
Email address, IP address;
Social media account information;
Stay duration, transportation details, forward journey, companion(s) details, dietary preferences, health conditions, food allergies;
Demographic information, cultural interests.
Billing & Taxation details (such as credit card / debit card details, including card type, number, security number, expiry, etc.);
Movement tracking across our website, click patterns, access times, browser type;
Communications you share with us through letters, emails, calls or interactions, as well as comments you submit during your stay;
CCTV footage for security purposes (image only, no sound).
Note on Minors: Data collected on persons under the age of 16 are restricted to name, surname, nationality and date of birth, and can only be provided by an adult or guardian.
Purposes for collecting Personal Information
We may process your personal data mainly for the following purposes:
1. To provide the contractual accommodation and hospitality services you request from us and entrust us to provide.
Following your request for a room reservation, we shall collect your and your companion(s) personal data in order to facilitate provision of room, checking in/out, transportation, payment, room service, facilities, wi-fi, restaurant & spa services, etc.
2. To execute the payment for all our provided services, following your authorization for the execution of the contract.
When making a reservation we may require certain financial information, such as bank or credit card details, in order to process and comply with the applicable legal provisions. We may retain your financial information, but shall do so only with your explicit consent. If you may be asked to select online payment, either by credit, debit or prepaid card, you may be automatically transferred to a safe banking transaction environment of our partner payment agencies at which you may be asked to provide your card details in a secure environment.
3. Advertising & Marketing purposes: If you have explicitly requested or consented to receiving such actions from us, we may use your personal information (such as email) in order to communicate to you offers that may interest you, promotions, greetings, festive messages or news of upcoming events.
4. For internal accounting and tax purposes.
5. For development of our services.
6. To comply with any laws, customs, regulations, court orders or immigration legalities.
Cookies
Cookies are data files that are embedded by websites on the hard drive of the visitor to their sites. We may use cookies to remember you, to improve your experience on our website, to study your navigation patterns or to collect anonymous statistical data such as what pages you visited and for how long.
Most browsers allow the user to choose which cookies can be placed on their computer or to delete / disable cookies. Your online relationship with our website may be managed by cookies settings.
We may use third-party web analytics services on our website, such as Google Analytics, which may deploy cookies to help us monitor and improve our website to optimize user experience and improve user satisfaction.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Ampersand Resort does not sell, lease, barter or exchange your personal data, nor will we do so at any future time. We may share your personal data with a third-party or use it for any purpose for which it was collected only with your explicit consent, or if we are required to do so by law. In particular, we may share your personal data in the following cases:
Our external financial, legal or accounting partners (e.g., accountants, solicitors, auditors, consultants, etc.)
Suppliers and service providers, including suppliers of IT solutions that assist us in providing services during your stay.
Marketing & market research firms that help optimize our services.
Tour operators, tour guides and online travel agents (such as agoda.com, booking.com, expedia.com).
Other external service providers, such as car rental companies, external spa service providers, laundry services, etc.
Any third party to whom we may sell or transfer part or whole of our business or assets.
As required and authorized by any applicable law, and to comply with our legal obligations, such as from government agencies, public authorities, under a valid request or obligation.
How we safeguard your data
We implement various procedures and security measures to our physical and electronic files in order to protect the personal information they hold. Regular & systematic controls are implemented on our workstations, such as automatic computer locking, regular software & hardware updates, strong password practices, to prevent unlawful gain of unauthorized access and abuse of personal information.
We regularly review security measures on our servers to strengthen protection of personal data, however we are not responsible for any third-party’s actions or their security controls with respect to information that these third-parties may collect or process via their websites, services or otherwise.
How long we retain your data
We will not retain your data longer than the period necessary to fulfil the purpose for which they were collected, or as required by applicable laws and regulations to retain it longer or delete it sooner, or unless you exercise your right to have your personal data removed, or their use restricted.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
What rights you have over your data
If you provide any personal data through your interaction with our website or facilities, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Contact us
In case you wish to receive any clarification or information regarding the terms of this Privacy Policy, you wish to exercise your rights or send a complaint you may contact Ampersand Resort at the address provided at the top of this Privacy Policy.
Changes to this policy
This Privacy Policy may change from time to time according to the legislation or industry norms without prior notice. For this reason we invite you to check this web page regularly.