Privacy Policy

Privacy Policy Statement

Andara Resort and Villas Co., Ltd (including affiliates, referred to as “Andara”, “we”, “us”, or “our”) respects your privacy. We process personal data in compliance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and applicable regulations. As the data controller, we are committed to protecting your data.

This Privacy Policy applies to personal data collected via www.andaraphuket.com and andarahospitality.com (the “Website”), related services, direct contacts, reservations, and guest interactions. It excludes third-party sites (e.g., affiliates with separate policies). We may update this policy to reflect legal changes or practices—check the effective date and review periodically.

Contact: For queries, rights exercises, or complaints, email [email protected] or write to Andara Resort & Villas, 15 Moo 6, Kamala Beach, Kathu, Phuket 83150, Thailand. 

Information We Collect
We collect minimal data for legitimate purposes. Non-personal data (e.g., IP address, browser type, pages visited) is logged anonymously for site analytics.
Personal data may include:
Identity: Name, surname, date/place of birth, gender, government ID (e.g., passport, visa).
Contact: Email, phone (including mobile), postal address, work details.
Stay/Payment: Reservation details, preferences, credit/debit card info (via secure processors).
Other: Survey responses, newsletter sign-ups, social media data (with consent).

We do not knowingly collect data from children under 18 without verifiable parental/guardian consent. Newsletters require age-of-majority confirmation.

How We Use Your Data
We process data only with a lawful basis under PDPA. See table below.

Purpose

Lawful Basis

Legitimate Interest (if applicable)

Provide services (e.g., bookings, stays, preferences)

Contract performance

N/A

Respond to inquiries, newsletters, promotions

Consent; Contract; Legitimate interests

Improve services, business development

Verify identity, maintain records

Legal obligation; Legitimate interests

Fraud prevention, compliance

Analytics, market research, site usage stats

Legitimate interests

Optimise the website and study user trends

Marketing (e.g., emails, offers)

Consent

Grow business, personalize experiences

Fraud detection, dispute resolution, security

Legitimate interests; Legal obligation

Protect rights, operations, safety

Legal compliance (e.g., government requests)

Legal obligation

N/A

Marketing: Opt-in required; unsubscribe anytime via email links. 

Sharing and Disclosure
Data is shared only as necessary:
Internally: Across Andara for service delivery.
Service Providers: E.g., payment processors, reservation systems (Synxis), and analytics (Google), with data processing agreements ensuring PDPA compliance.
Business Partners: Limited for bookings (e.g., travel agents).
Legal: To authorities, courts, or for rights protection.

Cross-Border Transfers
Data may transfer outside Thailand (e.g., to providers in the US/EU). We ensure equivalent protections via PDPA-approved mechanisms (e.g., Standard Contractual Clauses, consent). By using our site, you consent to such transfers.

Data Security and Retention
We use industry-standard security (e.g., encryption, access controls) to protect data. Retention: Only as long as needed for purposes (e.g., 5-7 years for bookings per legal requirements; delete sooner on request). Secure deletion follows.

Your PDPA Rights
Access/Rectify/Erase: View, correct, or delete your data.
Object/Restrict: Oppose/restrict processing.
Withdraw Consent: Anytime, without affecting prior processing.
Portability: Receive data in a structured format.
Complain: To us or the Personal Data Protection Committee (PDPC).

Requests are processed free within 30 days (extensions are possible for complexity). Verify identity first.

Cookies
We use cookies for functionality, analytics, and personalisation. Strictly necessary cookies operate without consent; others require it via our banner.
Categories:
Necessary: Site operation.
Analytics/Performance: Usage stats (e.g., Google Analytics).
Marketing: Personalised ads.
Third-Party: Vimeo, Synxis, YouTube, etc. (per their policies).

Manage via browser settings or www.allaboutcookies.org. Full details: Cookie Policy

Third-Party Links
Links to external sites (e.g., social media) are covered in their own policies. Please visit the social media websites for their most recent policies.

Changes
We notify material changes via website/email. Continued use implies acceptance.

Cookie Policy
Andara uses cookies/technologies on the website/emails for identification, analysis, and ads. Consent via banner on first visit—withdraw anytime.
We would like to remind you that changing or disabling certain cookies may affect the functioning of the website and your browsing experience. 
Managing cookies on web browsers by checking:
• Chrome
• Safari
• Firefox
• Edge

Updates to our Cookie Policy
Changes may be made to this Cookie Policy from time to time without prior notice, and new versions of this policy will be published on our website. Please check back to see any updates or changes to our cookie policy.

Last updated: 24 February, 2026