Personal Data Processing Notice

This Personal Data Processing Notice and Consent ("Agreement") describes how Mila Letit Thai Co., Ltd. ("Company") collects and processes the personal data of customers and website users ("Data Subject", "you") in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"). It supplements our Privacy Policy.

1. Purpose of Processing

The Company processes your personal data for the following purposes:

• Concluding and performing the accommodation booking contract between you and the Company.
• Processing payments and issuing receipts and tax documents.
• Communicating with you about your reservation and providing guest support.
• Fulfilling legal, accounting, and tax obligations.
• Protecting against fraudulent or unlawful activity.

2. Categories of Personal Data

• Full name, email address, telephone number, nationality / country of residence.
• Booking details (property, dates, number of guests, special requests).
• Payment-related information processed via a certified third-party payment provider.
• Communication records between you and the Company.

We do not intentionally collect sensitive personal data (such as religion, health, or biometric data). Please do not provide such data unless specifically requested and consented to.

3. Lawful Basis

Processing is carried out on the basis of: (a) the necessity of performing a contract with you; (b) compliance with the Company's legal obligations; (c) the Company's legitimate interests; and (d) your explicit consent where required.

4. Disclosure to Third Parties

Your personal data may be disclosed to: property owners and on-site service staff; payment-service providers and banks; accountants and legal advisers bound by confidentiality; and competent authorities where required by law. The Company does not sell or rent personal data.

5. Data Retention Period

Personal data is retained for the duration of the contractual relationship and thereafter only for the period required by applicable tax and accounting law (generally up to 10 years for accounting records), after which it is securely destroyed or anonymised.

6. Rights of the Data Subject

Under the PDPA you have the right to: be informed; access and obtain a copy of your data; rectify inaccurate data; erase or de-identify data; restrict or object to processing; data portability; and withdraw consent at any time without affecting the lawfulness of prior processing.

7. Withdrawal of Consent

You may withdraw your consent at any time by contacting milaletitthai@gmail.com. Please note that withdrawing consent may prevent us from completing your booking or providing certain services.

8. Consequences of Not Providing Data

Certain personal data is necessary to enter into and perform the booking contract. If you do not provide it, we may be unable to process your reservation.

9. Security Measures

The Company applies appropriate technical and organisational safeguards to maintain the confidentiality, integrity, and availability of personal data, including encrypted payment processing and restricted internal access.

10. Consent Statement

By submitting a booking enquiry or completing a reservation, you acknowledge that you have read and understood this Notice and consent to the collection, use, and disclosure of your personal data for the purposes described above, in accordance with the PDPA.

11. Contact / Data Protection Enquiries

Mila Letit Thai Co., Ltd. · milaletitthai@gmail.com · +66 92 839 9056. You may also contact the Personal Data Protection Committee (PDPC) of Thailand regarding any complaint.