Sun Breeze Co.,Ltd. respects user privacy and cares about the protection of personal data. This Privacy Policy explains what data we collect, what purposes we use it for, who we may share it with, and what rights users have.

This Policy applies to the Sun Breeze Co.,Ltd. website, contact forms, booking requests, communication through messengers, email, phone, and other company communication channels.

1. Who processes personal data

The personal data controller is:

Sun Breeze Co.,Ltd.

The company provides services related to villa rentals, processing booking requests, client consultations, property selection, and communication support between clients, property owners, and company representatives.

For questions about personal data processing, users may contact us through the contact form, WhatsApp, Telegram, email, or other contact channels listed on the Sun Breeze Co.,Ltd. website.

2. What data we collect

We may collect the following categories of data:

Data provided directly by the user:

• first and last name;

• phone number;

• email;

• messenger account or contact;

• country of residence;

• planned check-in and check-out dates;

• number of guests;

• preferences regarding villa, area, budget, and additional services;

• comments, questions, and messages sent through website forms or messengers.

Data related to booking:

• selected villa;

• rental period;

• request status;

• communication history;

• booking confirmation information;

• prepayment or payment data, if such data is provided by the client;

• special accommodation preferences.

Technical data:

• IP address;

• device type;

• browser;

• operating system;

• browser language;

• pages visited by the user on the website;

• date and time of visit;

• source of referral to the website;

• cookies and similar technologies.

3. Why we use data

Sun Breeze Co.,Ltd. uses personal data for the following purposes:

• processing villa booking requests;

• contacting the user regarding a request;

• checking villa availability for selected dates;

• preparing rental offers;

• agreeing on accommodation terms;

• maintaining a client database and CRM;

• sending notifications related to requests;

• improving website and service quality;

• analyzing advertising effectiveness and request sources;

• preventing fraud, spam, and abuse;

• fulfilling legal and accounting obligations, where applicable;

• protecting the rights and legitimate interests of Sun Breeze Co.,Ltd., clients, property owners, and partners.

4. Legal grounds for processing

We process personal data only when there are legal grounds to do so. Depending on the situation, such grounds may include:

• user consent;

• the need to process data in order to respond to a user request;

• preparation and performance of a rental or service agreement;

• compliance with legal requirements;

• the legitimate interest of Sun Breeze Co.,Ltd., including maintaining a client database, improving service, website security, and protection against fraud.

If processing is based on consent, the user may withdraw consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Booking requests

The booking form on the website is a booking request and not an automatic booking confirmation.

After the form is submitted, Sun Breeze Co.,Ltd. may contact the user to clarify details, check villa availability, agree on price, payment terms, and other accommodation details.

Data from the form may be stored in CRM systems, spreadsheets, request management systems, or other company work tools.

6. Data sharing with third parties

Sun Breeze Co.,Ltd. may share personal data only to the extent necessary to process a request, provide services, and operate the website.

Data may be shared with the following categories of recipients:

• employees and representatives of Sun Breeze Co.,Ltd.;

• villa owners or property managers, if necessary to process the request;

• CRM systems and data storage services;

• email marketing and notification services;

• messengers and communication platforms;

• payment services, if payment is used;

• analytics and advertising services;

• technical contractors who help maintain the website and infrastructure;

• government authorities, if disclosure is required by law.

We do not sell users' personal data to third parties.

7. International data transfer

Some services used by Sun Breeze Co.,Ltd. may store or process data outside Thailand. This may include CRM, analytics, email services, cloud storage, hosting, messengers, and other tools.

In such cases, Sun Breeze Co.,Ltd. takes reasonable measures to protect personal data and transfers data only to the extent necessary for the service to function.

8. Data retention

We retain personal data for as long as necessary for the purposes described in this Policy.

In general, request and communication data may be retained for the period needed for:

• processing the request;

• booking support;

• client support;

• follow-up communication with the client;

• accounting;

• resolving possible disputes;

• complying with legal requirements.

If data is no longer needed, Sun Breeze Co.,Ltd. deletes, anonymizes, or archives it, unless further storage is required by law or to protect the company's legitimate interests.

9. Cookies and analytics

The Sun Breeze Co.,Ltd. website may use cookies and similar technologies.

Cookies help us:

• display the website correctly;

• remember user settings;

• analyze traffic;

• understand which pages and properties interest users;

• improve the website structure;

• evaluate the effectiveness of advertising campaigns.

Users may limit or disable cookies in browser settings. If cookies are disabled, some website functions may not work correctly.

10. Advertising and analytics services

We may use analytics and advertising tools to understand user behavior on the website and evaluate advertising effectiveness.

Such services may collect technical data, including IP address, device data, browser data, website actions, and referral source.

This data is used for analytics, website improvement, ad setup, and traffic quality assessment.

11. Personal data protection

Sun Breeze Co.,Ltd. takes reasonable organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure, loss, or destruction.

Such measures may include:

• restricting access to data;

• using secure services;

• controlling employee and contractor access rights;

• storing data in authorized work systems;

• regularly reviewing whether data storage remains necessary.

At the same time, data transmission over the internet cannot be absolutely secure, so users should also take care of the security of their own devices, accounts, and communication channels.

12. User rights

Under applicable law, users may have the following rights:

• the right to receive information about the processing of their personal data;

• the right to request access to their data;

• the right to request correction of inaccurate or outdated data;

• the right to request deletion of data;

• the right to restrict data processing;

• the right to object to processing;

• the right to withdraw consent if processing is based on consent;

• the right to request data portability, where applicable;

• the right to lodge a complaint with the competent personal data protection authority.

The Thai PDPA provides data subjects with a number of rights, including access, correction, deletion, objection, consent withdrawal, and filing a complaint with the competent authority.

To exercise their rights, users may contact Sun Breeze Co.,Ltd. through the contact channels listed on the website.

Before fulfilling a request, the company may ask the user to confirm their identity in order to protect data from unauthorized access.

13. Children's data

The website and services of Sun Breeze Co.,Ltd. are intended for adult users.

We do not knowingly collect personal data of children without the consent of parents or legal guardians. If we become aware that such data has been provided without the required consent, we will take reasonable steps to delete it.

14. Links to third-party websites

The Sun Breeze Co.,Ltd. website may contain links to third-party websites, services, maps, messengers, payment systems, or social networks.

Sun Breeze Co.,Ltd. is not responsible for the privacy policies or data processing practices of third-party services. Users should review the rules of such services before using them.

15. Policy updates

Sun Breeze Co.,Ltd. may update this Privacy Policy from time to time.

The current version of the Policy is published on the website. If changes are material, the company may additionally notify users by an available method.

Continuing to use the website after the updated version is published means that the user agrees to the new version of the Policy.

16. Contacts

For questions regarding personal data processing, data deletion, information correction, or withdrawal of consent, users may contact Sun Breeze Co.,Ltd. through the contact form, WhatsApp, Telegram, email, or other contact channels listed on the website.