Privacy Policy

Mila Letit Thai Co., Ltd. ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or make a booking, in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA").

1. Personal Data We Collect

• Identity and contact data: name, email address, telephone number, and country of residence.
• Booking data: property selected, check-in and check-out dates, number of guests, and special requests.
• Payment data: payment is processed by a third-party PCI-DSS-compliant payment provider. We do not store full card numbers on our systems.
• Technical data: IP address, browser type, and basic usage information collected through standard web technologies.

2. How We Use Your Data

• To process and manage your booking and provide the requested accommodation and services.
• To communicate with you regarding your reservation, including confirmations and support.
• To process payments and prevent fraud.
• To comply with legal, tax, and accounting obligations under Thai law.
• With your consent, to send you information about offers or services (you may withdraw consent at any time).

3. Legal Basis for Processing

We process personal data on the basis of: performance of a contract (your booking); compliance with legal obligations; our legitimate interests in operating and securing our business; and, where applicable, your consent.

4. Disclosure of Data

We do not sell your personal data. We may share it only with: property owners and on-site staff as necessary to deliver your stay; payment processors and banks; professional advisers (accounting, legal); and government authorities where required by law. Any third parties are required to protect your data and use it only for the agreed purposes.

5. International Transfers

Your data is primarily processed in Thailand. Where data is transferred outside Thailand (for example, via international communication or payment services), we take reasonable steps to ensure an adequate level of protection consistent with the PDPA.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with legal and tax obligations, after which it is securely deleted or anonymised.

7. Your Rights under the PDPA

Subject to the conditions of the PDPA, you have the right to: access your personal data and request a copy; request correction of inaccurate data; request erasure or restriction of processing; object to processing; request data portability; and withdraw consent at any time. To exercise these rights, contact us at milaletitthai@gmail.com.

8. Cookies

Our website uses only essential technologies required for it to function. We do not use advertising or tracking cookies that require consent. Any future use of non-essential cookies will be subject to your prior consent.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Payment transactions are encrypted and processed through secure, certified payment gateways.

10. Complaints

If you believe your data has been handled improperly, please contact us first so we can resolve the matter. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

11. Contact

For privacy enquiries: milaletitthai@gmail.com · +66 92 839 9056.