Last Updated: July 2021
our privacy practices when we communicate with you by offline channels, such as when you provide your information to our call centers, or in person (“Offline Services”); and
the basis on which we will process personal data we collect from you or that you provide to us, and your choices with respect to that data.
1.1 Personal Data from or about You
Contact Details: Your name, e-mail address, phone number, physical address (billing and shipping), company affiliation, title;
Demographic Data: Demographic information and location data, and government-issued identifiers (e.g., drivers’ license (including dates of birth), passport numbers or other national identifiers);
Financial Details: Your credit card and/or debit card details;
Guest Stay Information: Guest stay information, special requests and preferences (including preferred room type or floor, spend, vacation preferences, amenities requested, language preferences, interests, hobbies, ages of children or companions and any other aspects of the Services used), telephone numbers dialed, faxes and telephone messages received;
Social Media Details: Social media account information, profile pictures or posts;
Your Feedback: Information, feedback or content you provide regarding your marketing preferences, in surveys, comment cards, sweepstakes, or promotional offers on our Services and those of third parties;
CCTV/Surveillance: For your safety and security, images and visual recordings through the use of closed circuit television systems collected while visiting a Nai Ya Hotel or property, where permitted by applicable law;
Corporate Account Data: Contact details concerning the employees of corporate accounts and vendors and other individuals with whom we do business (e.g., travel agents, bookers, event planners); and
Other Data: Other types of information that you voluntarily choose to provide to us.
1.2 Sensitive Personal Data
From time to time, you may provide or we may collect what is considered sensitive personal information or “special categories of personal data” under applicable privacy laws (herein referred to as “Sensitive Personal Data”). For example, you may disclose your religious affiliation to us when you host or attend an event at one of our hotels or provide your health information or dietary restrictions so that we can accommodate you during your stay.
We only process Sensitive Personal Data if and to the extent permitted and required by applicable law or with your express consent. Unless otherwise required by applicable law, you are not required to provide us with any of your Sensitive Personal Data. Should you choose not to, your decision would not prevent you from using our Services.
2. WHEN IS YOUR PERSONAL DATA COLLECTED?
We collect Personal Data about you in a number of ways, including when you provide such data to us. This includes:
When you make reservations, stay at a property or plan or attend an event. Visitors who elect to make reservations using our Services or Offline Services will be asked to supply specific Personal Data, including your Contact Details and Demographic Details such as your name, e-mail address and contact information, as well as Financial Information to secure the reservation, such as a credit card number. We collect your Personal Data, and with your consent, Sensitive Personal Data to provide you with services, including when you purchase goods and services, inform us of any requests, or take advantage of services such as concierge services, health clubs and spa treatments, activities, equipment rentals, and child care services. If you plan or host an event with us, we collect meeting and event specifications, such as your name, contact details, date of event, occasion, number of guest rooms required, and length of stay. We also collect information about guests that are a part of your group or event.
When you sign up for promotional offers and sweepstakes. We collect your e-mail address when you sign up for promotional offers, newsletters or sweepstakes.
When you provide your comments and feedback or communicate with us. We may collect Personal Data that you voluntarily share with us in surveys, guest feedback or comment cards, as well as on third-party websites. We also collect your Personal Data when you communicate with us via text or e-mail or otherwise, like Line or Facebook.
When you share photos. We collect and publish photos and images you voluntarily share with us about your experience with us, which you may post on our Services.
When you purchase a gift card. If you decide to purchase a gift card through Facebook, we collect Personal Data including the recipient’s name, e-mail address, shipping information, and any other information you voluntarily provide.
From social media. We collect Social Media Details such as when you ‘like’ the Website, share content or follow us on social media sites like Facebook, Twitter, Pinterest Instagram, or WeChat. If you choose to log-in, connect with or link to Services using your social media account certain Personal Data is shared with us consistent with your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates, as well as Personal Data that may be a part of your profile or friend’s profile.
When you inquire about development or Owner opportunities. We may collect your Personal Data including your e-mail address when you contact us to learn more about development or ownership opportunities with us.
We collect Personal Data, including from other sources. This includes:
From Other Sources. We may receive your Personal Data from other sources, like public databases, joint marketing partners, social media sites that consisting with your settings on related services,and other third parties including online booking services, travel agencies, airline, credit card partners and other parties who sell products and services under our brand. Such information usually includes your Contact Details, Social Media Details, Your Feedback and Other Data that you voluntarily choose to provide to us.
3. WHY IS PERSONAL DATA USED?
We use your Personal Data, both for business and commercial purposes as set forth below.
3.1 Performance of a Contract. We process your Personal Data in order to perform a contract with you, including to complete your reservation, provide you goods and services that you requested, or to inform Owners of your stay in order to render services to you while visiting a hotel or other property that we manage.
3.3 To Comply with Legal Obligations. We process your Personal Data where it is necessary to comply with legal obligations to which it may be bound. This includes complying with legal processes, responding to requests from public and government authorities around the world, and pursuing available remedies or limit damage we or other third parties may sustain.
3.4 With Your Consent. We process your Personal Data when we have your valid consent to do you, including to communicate (including by e-mail and SMS) with you during your stay, to send you promotional offers, newsletters, information on us, our Services, and other marketing communications in accordance with your preferences; and to process Sensitive Personal Data you may have provided us in connection with your stay; for example, any dietary restrictions or special accommodations for physical and medical conditions.
3.5 Vital Interest. In certain circumstances when it is not possible to obtain your consent, it may be necessary for us to process your Personal Data, including Sensitive Personal Data you provided through our Services, where it is in your vital interest or in the interest of others, for example in the event of a medical emergency.
4. DO WE SELL YOUR PERSONAL DATA?
5. WHEN AND TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?
In the preceding twelve (12) months, we have disclosed or shared your Personal Data described as follows:
5.1 To Owners, Hotels and Other Properties. The Personal Data you provide to us in connection with making a reservation, including your Contact Details, Demographic Data, Financial Details, and Guest Stay Information, is shared with the respective Owner and hotel or property for purposes of meeting your reservation request. After your stay, we retain your Personal Data, including the details of your stay and your preferences (e.g., room, type, interest, hobbies, amenities used) to provide you personalized service during your next stay, subject to your preferences.
5.2 Commercial Service Providers and Suppliers. We outsource certain functions and/or information to third parties that provide services to Nai Ya Hotel such as Services hosting, data analysis, payment and credit card processing, order fulfilment, customer service, e-mail delivery, financial services companies, delivery services, advertising networks, and information technology. We may also share your Personal Data described above with third-party providers that provide services such as spa treatment, salons, and restaurants within our hotels or other properties, or event planners or organizers of any event you plan or host with us.
5.3 External Partners. We may share your Personal Data to other partners, consultants and advisors who render services to us, including financial institutions, external auditors, lawyers, and credit card issuers.
5.5 Co-Sponsors of Promotions and Sweepstakes. Your Personal Data, including your Contact Details or Feedback, may be shared with our affiliates or other unaffiliated business partners that serve as co-sponsors or third-party sponsors of promotions, sweepstakes, or other contests if you enter into one of these activities on our Services.
5.6 Social Media and Message Boards. If you connect to one of our social media pages, we may disclose your Personal Data including your Social Media Details to your friends associated with your social medial account, to other website users, and to your social media account provider, in connection with your social sharing activities. We may make reviews, message boards, blogs and other user-generated content available to users on our Services. Any information disclosed in these areas is public information and you should accordingly exercise caution when deciding to disclose your Personal Data in this context. We are not responsible for the privacy practices of other users including web operators to whom you provide information.
5.7 Anonymized Data. We may share aggregated data with third parties collectively in an anonymous way, which does not reveal Personal Data.
6. WHAT COOKIES AND OTHER TECHNOLOGIES DO WE COLLECT?
6.1 Automatic Data Collection.. We may use automatic data collection technologies to collect certain statistical (non-personal) information about your equipment, browsing actions, and patterns, including (a) details of your visits to our Services, including traffic data and location data, date and time of access, frequency and other communication data; (b) information about your computer and internet connection, including your IP address, operating system, host domain, and browser type; and (c) details of referring websites actions, and patterns.
6.3 Social Media Plug-ins. One of the features of our Site is that it uses what are called social plugins (“plugins”) from the social networks, Facebook, YouTube, Pinterest, and Instagram. These plugins are indicated by the respective logo of the social network. When you access our Site, your browser establishes a direct connection with the servers of these social networks. The content of the plugin is transferred by the social network directly to your browser, which then integrates it into the Site.
6.4 Integration of the plugin causes Facebook, for example, to receive the information that you have loaded the corresponding page of our Site. If you are logged in with Facebook, it will be able to assign your visit to your Facebook account. Please note that an exchange of this information already takes place when you visit our Site, regardless of whether you interact with the plugin or not. If you interact with the plugins, such as by pressing the ‘Like’ button, the corresponding information is sent directly to Facebook by your browser and saved there. You can find information on the purpose and extent of data acquisition as well as how the data is processed further and used by the social networks, together with your rights and optional settings to protect your private sphere, in the data protection notes of the social networks.
6.5 If you do not want incorporated social networks to gather data about you via our Site, you must log out on the respective domain of the social network before visiting our Site. If you wish to prevent information being exchanged with the above-mentioned social networks during your visit to our Site, you can opt out of cookies through your browser settings and other tools.
6.6 Wi-Fi and Location-Based Services. In the course and for the purpose of providing Wi-Fi services at our hotel, we may collect device identifiers (such as your IP address, or other unique identifier). Based upon your consent, we also may collect information about the physical location on your device through use of the Wi-Fi services or other technologies to provide you with personalized location-based services, such as to customized offers and promotions or to find a hotel near you.
6.7 Do Not Track. Currently, we do not alter our data collection and use practices in response to Do Not Track signals.
7. HOW DO WE PROTECT PERSONAL DATA?
We maintain commercially reasonable security safeguards that are designed to protect the Personal Data we collect against unauthorized use, disclosure, alteration or destruction. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure and we cannot guarantee or warrant that your Personal Data is under absolute security with the existing security technology. Additionally, when requesting information or sending information or forms to us by e-mail, please be advised that e-mail communication to and from our Services are not secure unless clearly noted otherwise. This is a risk inherent in the use of e-mail.
8. THIRD-PARTY WEBSITES AND SERVICES
8.1 Our Services may contain links to, or have features that are hosted by, other third-party websites or services that are not owned or controlled by us. For example, we give you the opportunity to connect, link, or share our Services (and the content you access) via certain social media websites.
9. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
10. HOW CAN YOU MANAGE YOUR PREFERENCES AND INFORMATION?
10.1 Commercial E-mails. You may opt-out of receiving commercial e-mails from us by following the instructions contained in any of the commercial e-mails. Unsubscribing from one type of communication may not unsubscribe you from another type. Please note that even if you unsubscribe from commercial e-mail messages, we may still e-mail you non-commercial (transactional) e-mails related to your account and your transactions via the Services.
10.2 Text Messages and SMS. To opt out of text messages, reply STOP to the message you received or contact the hotel or property front desk to inform them you no longer wish to receive text messages.
10.3 Access and Connections to Social Media. If you registered with the Services through your social media account, or connected, linked, or shared your use of our Services via your social media profile, you can manage the permissions granted to such third-party social media services by accessing your user settings under your account. You also can remove our access to your social media account or otherwise control what information these third-party social media services share with us at any time by accessing the privacy settings in your social media account.
11. WHAT INFORMATION IS COLLECTED FROM CHILDREN?
11.1 We have not designed the Services for, and do not intend for them to be used by, anyone under age 16. We do present information regarding our Rose Buds® program on our Services for the reference of adults that are interested in activities at our locations for children. Accordingly, the Services should not be used by anyone under age 16 without adult supervision. If you are under 16, please do not provide Personal Data of any kind whatsoever.
11.2 Should we inadvertently acquire Personal Data or other information from users under the age of 16, we will not knowingly provide this data to any third party for any purpose. If a child does provide us with Personal Data over Services, a parent or guardian of that child may contact us and upon notification, we will delete from our records any information collected from children under the age of 16.
13. YOUR RIGHTS AND CONTACT
Subject to applicable law, you may be entitled to access, rectify, erase, limit the use or transfer the personal data we hold of you. Whenever reasonably possible and required, we will strive to grant these rights within one (1) month or within a reasonable time. You may also withdraw your consent to our processing of your personal data at any time. You may in certain circumstances ask us to delete your personal data, in which case, to the extent permissible by applicable law, we will take reasonable steps to delete or de-identify your personal data. Please note that we may not be able to continue providing services to you if you entirely withdraw your consent or ask us to delete your personal data entirely, and this may also result in the termination of any agreements with Nai Ya Hotel.
Email us at firstname.lastname@example.org
Call us in Thailand at 053-727-239
Write to us at
Nai Ya Hotel 111 Ruamchittawai Rd, Tambon Rop Wiang, Mueang Chiang Rai District, Chiang Rai 57000
Cookies are data elements which a website may send to your browser to assist you more effectively with database-supported systems. You can, however, set your browser in such a way that it informs you whenever you receive a cookie. You can then decide for yourself whether or not to accept it.
The transmission of messages, documents and other information by email is regarded as less reliable, secure and confidential than transmission by letter or fax. We use modern detection technology against viruses and spam. However we recommend that you also use virus scanners and decline all liability for damage caused by emails or the loss thereof. We reserve the right to reject emails with potentially hazardous file attachments.