Privacy Policy.

We collect only information reasonably required to answer an enquiry, provide accommodation or another requested service, meet legal obligations and protect guests, staff and the property.

• identity and contact details, including name, nationality, email address, mobile or WhatsApp number and postal address;
• reservation details, including dates, room, rate plan, guest numbers, preferences, requests and booking source;
• legally required identification and immigration information during secure check-in, including Thai ID or passport and relevant arrival or visa details;
• payment status, transaction references and limited billing information; Tea Tree does not need to store complete payment-card details when a payment provider processes the transaction;
• communications, service requests, complaints, incident records and information voluntarily supplied about a pet, allergy, accessibility need or other request;
• basic technical and security information such as browser, device, IP address, access time and website error records.

Personal data may be used to check availability; create, administer and verify reservations; take or reconcile payment; communicate before and during a stay; provide requested hotel, spa, food, laundry or rental services; complete registration and immigration duties; prevent fraud and misuse; resolve complaints; maintain security; keep accounting and operational records; and comply with Thai law.

Where required, processing is based on the guest’s request or contract, legal obligations, legitimate operational and security interests, vital interests in an emergency, or consent. Optional marketing is not a condition of booking and may be withdrawn.

We receive information directly from guests and authorised companions, from online travel agents or travel partners used by the guest, from Cloudbeds and payment providers involved in a direct reservation, and from authorities or service providers where permitted by law.

Information is shared only to the extent reasonably necessary with service providers and partners supporting the reservation or stay. These may include Cloudbeds, 2C2P when activated, website and email providers, WhatsApp when a guest chooses to use it, accountants, professional advisers, contracted spa, food, laundry or rental service providers, and competent Thai authorities.

Third parties act under their own terms or appropriate contractual safeguards. We do not sell personal information.

Some technology, communication and booking providers may process information outside Thailand. Where this occurs, we use providers and safeguards reasonably appropriate to the service and applicable law.

Information is kept only for as long as reasonably necessary for the purpose collected, to manage the stay and any dispute, and to satisfy accounting, tax, immigration, safety and other legal requirements. Records are then deleted, anonymised or securely restricted unless continued retention is required or permitted by law.

We use proportionate organisational and technical controls, including restricted staff access, secure credentials, encrypted connections where supported, service monitoring and minimisation of information collected on public pages. No internet service is completely risk free, but suspected incidents are investigated and handled in accordance with applicable requirements.

Subject to the Thailand Personal Data Protection Act and applicable exceptions, a person may ask whether we hold their data and request access, correction, portability, restriction, objection, deletion or withdrawal of consent. Identity may be verified before a request is completed.

A person may also complain to the competent Thai personal-data authority. Withdrawal of consent does not affect earlier lawful processing and may not override records Tea Tree must retain by law or for legitimate claims.

Reservation information concerning children should be supplied by a parent, legal guardian or authorised adult. The public website is not designed to collect information directly from children.

Our current use of browser storage and third-party services is explained in the Cookie Policy. External services opened by a guest, including WhatsApp and booking or payment providers, operate under their own privacy terms.

This Policy may be updated when services, providers or legal requirements change. The effective date above identifies the published version.