Privacy Policy
Last updated: 31 July 2026
This policy explains how Sunshine456 collects, uses, and protects your personal data when you use this website and book directly with us. We act as the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
What we collect
When you make a booking, we collect your full name, email address, phone number, check-in/check-out dates, number of guests, and any notes you add. Payment is by Thai bank transfer or PromptPay directly to our bank account — we don't collect or store your card details. If you choose to upload a transfer slip for reference, we store that image to match it against your payment. Passport/ID copies (required by Thai immigration law for TM.30 reporting of foreign guests) are collected in person at check-in, not through this website.
How we use it
We use your data to confirm and manage your booking, communicate with you about your stay, send confirmation and deposit-related emails, process refunds or deductions per our policies, and comply with legal obligations (accounting/tax records, immigration reporting).
Sharing with third parties
We share data only as needed with the services we use: Resend (sending emails), Supabase (database storage, including transfer-slip images if you upload one), Vercel (website hosting), and Cloudflare (bot-check via Turnstile when you submit a booking). Payment itself is a direct bank transfer or PromptPay payment to our own bank account — no payment processor is involved. These providers process data on our behalf under their own agreements. We never sell or rent your data to anyone for marketing. Some pages embed Google Maps or YouTube — if you interact with those, Google may collect data under its own privacy policy.
Cookies
This site uses a cookie to remember your chosen language (Thai/English/Chinese), plus a security cookie from Cloudflare Turnstile used to verify you're not a bot when submitting a booking. There are no marketing tracking cookies, no Google Analytics, and no advertising on this website.
How long we keep it
We retain booking records as long as needed for business, accounting, and tax purposes (Thai law generally requires keeping accounting records for at least 5 years). After that period, our system automatically removes your name, email, phone number, and notes, while keeping the booking record itself (dates, amount, house) for accounting purposes only.
Security measures
The entire site runs over HTTPS. Admin access is restricted to the business owner. We never handle or store payment card details — payment is a direct bank transfer or PromptPay payment to our bank account. Any transfer slip you upload is stored in a private location, viewable only by the business owner.
Your rights under the PDPA
You have the right to access, correct, delete, or withdraw consent for the use of your personal data (subject to legal exceptions, such as records we must keep for accounting/tax purposes). Contact us using the details below to exercise these rights. You may also file a complaint with Thailand's Personal Data Protection Committee (PDPC).
International data transfer
The service providers we use (Resend, Supabase, Vercel) operate servers outside Thailand. Your data may be processed abroad under each provider's own security standards.
Children's data
This website is not intended for use by anyone under 18. Bookings may only be made by guests aged 20 and over, per our booking policy.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page along with the date of the latest revision.
Contact us
For any questions about your personal data, contact us at (+66)89-553-5559 or contactus@sunshine456.com.