Privacy Policy

1. Introduction

Arena Club Koh Phangan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a booking at our establishments.

2. Information We Collect

We collect information that you provide directly to us when making a booking:

• Personal identification information (name, email address, phone number)
• Booking details (check-in/check-out dates, room preferences, number of guests)
• Payment information (processed securely through Stripe)
• Country of residence

3. How We Use Your Information

We use the information we collect to:

• Process and manage your bookings
• Send booking confirmations and updates
• Communicate with you about your stay
• Process payments securely
• Improve our services and website
• Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use:

• Supabase for secure database storage (hosted in compliant data centers)
• Stripe for secure payment processing (PCI DSS Level 1 certified)
• HTTPS encryption for all data transmission
• Regular security audits and updates

5. Third-Party Services

We share your information with the following third-party services:

• Stripe: Payment processing (see Stripe's Privacy Policy)
• Beds24: Booking management system
• Resend: Email delivery service

We do not sell or rent your personal information to third parties.

6. Cookies

We use cookies and similar technologies to:

• Maintain your session during booking
• Protect against CSRF attacks (security)
• Remember your currency preference
• Analyze website traffic (anonymized)

For more details, see our Cookie Policy.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing of your data

To exercise these rights, contact us at privacy@arenaclubkohphangan.com

8. Data Retention

We retain your personal data only for as long as necessary:

• Booking data: 7 years (accounting and tax requirements)
• Marketing data: Until you unsubscribe or 2 years of inactivity
• Payment data: Processed and stored by Stripe (not stored on our servers)

9. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@arenaclubkohphangan.com
• Phone: +66 77 375 123
• Address: 123 Haad Rin Beach Road, Haad Rin, Koh Phangan, Thailand