Privacy Policy

Last Updated: January 15, 2026

Introduction

waveolas is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, share, and safeguard personal information when you use our coastal property rental services in Thailand. This policy applies to information collected through our website, booking processes, and property management services.

For privacy-related questions or concerns, contact us at [email protected].

Data We Collect

We collect the following categories of personal information:

Booking Information: Name, email address, phone number, mailing address, payment details, and travel dates when you make property reservations or inquiries.

Property Usage Data: Information about your stay including check-in/check-out times, property preferences, and service requests during your accommodation period.

Website Analytics: We collect browsing patterns, pages viewed, time spent on pages, referring websites, and device information through cookies and similar technologies.

Communication Records: Correspondence including emails, phone conversations, and messages related to property inquiries, bookings, or customer service interactions.

We collect this information directly from you through booking forms, phone conversations, email correspondence, and automatically through website analytics tools.

How We Use Your Data

We process your personal information for the following purposes:

Service Delivery: Processing property reservations, coordinating check-in procedures, providing property access, managing bookings, and delivering requested services during your stay.

Communication: Sending booking confirmations, property access information, service updates, responding to inquiries, and providing customer support throughout the reservation and stay process.

Payment Processing: Processing payments, managing deposits, handling refunds, and maintaining financial records in accordance with legal requirements and standard business practices.

Website Improvement: Analyzing website usage patterns to improve user experience, optimize property listings, enhance navigation, and develop new features based on user behavior.

We base our data processing on contract fulfillment for booking-related activities, legitimate business interests for service improvement, and consent where required by applicable law.

Data Sharing

We share personal information with third parties only in the following circumstances:

Property Owners: We share necessary booking information with property owners to coordinate reservations, property access, and service delivery during your stay.

Payment Processors: Payment information is shared with secure payment processing services to handle transactions, process deposits, and manage refunds according to booking terms.

Service Providers: We engage third-party companies for website hosting, analytics, customer support systems, and email communication platforms who process data on our behalf.

Legal Compliance: We may disclose information when required by Thai law, court orders, government regulations, or to protect legal rights, property, or personal safety.

All third-party service providers are contractually bound to protect your information and use it only for specified purposes consistent with this policy.

Data Security

We implement security measures to protect your personal information:

Encryption: Sensitive data including payment information is encrypted during transmission using industry-standard SSL/TLS protocols. Stored data is encrypted where appropriate to security classification.

Access Controls: Personal information access is restricted to authorized personnel who require it for specific business functions. Access is granted based on role requirements and monitored for appropriate use.

Security Monitoring: We conduct regular security assessments, monitor systems for unauthorized access attempts, and maintain incident response procedures for potential data breaches.

While we implement appropriate security measures, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security of transmitted or stored information.

Cookies and Tracking

We use cookies and similar technologies for the following purposes:

Essential Cookies: Required for basic website functionality including secure login, session management, and booking form operation. These cannot be disabled without affecting core website features.

Analytics Cookies: Track website usage patterns including page views, navigation paths, and time spent on pages to understand user behavior and improve website functionality.

Preference Cookies: Remember your website preferences including language selection, currency display, and previously viewed properties to personalize your browsing experience.

You can manage cookie preferences through your browser settings or our cookie management tool. Detailed information about cookies we use is available in our Cookie Policy.

Your Rights

You have the following rights regarding your personal information:

Access: Request copies of personal information we hold about you, including booking records, communication history, and usage data stored in our systems.

Correction: Request correction of inaccurate or incomplete personal information in our records. We will update information promptly upon verification of requested changes.

Deletion: Request deletion of your personal information subject to legal retention requirements, active bookings, and legitimate business needs for record maintenance.

Data Portability: Request transfer of your personal information in structured, machine-readable format where technically feasible and legally required.

Objection: Object to processing of your personal information for marketing purposes or other processing based on legitimate interests rather than legal obligation.

To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days and may require identity verification before processing requests.

Data Retention

We retain personal information for the following periods:

Booking Records: Maintained for seven years from booking date to comply with Thai financial record-keeping requirements and support dispute resolution if needed.

Marketing Communications: Retained until you withdraw consent or we determine the information is no longer needed for business purposes, whichever occurs first.

Website Analytics: Aggregated analytics data retained indefinitely for long-term analysis. Individual user data deleted after 26 months of inactivity.

After retention periods expire, we securely delete or anonymize personal information unless legal requirements mandate longer retention for specific categories of data.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are under 18, please do not submit personal information through our website or services. Parents or guardians who believe we may have inadvertently collected information from a child under 18 should contact us immediately for deletion.

International Data Transfers

Your personal information is primarily stored and processed in Thailand. Some third-party service providers may process data in other jurisdictions including cloud hosting services and payment processors. When transferring data internationally, we implement appropriate safeguards including standard contractual clauses and verification of adequate data protection measures in recipient jurisdictions.

Policy Updates

We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated through email notification to registered users and prominent website notice. The "Last Updated" date at the top indicates the most recent revision. Continued use of our services after policy updates constitutes acceptance of revised terms.

Contact Information

For privacy-related questions, data access requests, or concerns about how we handle your information:

Email: [email protected]

Mail: waveolas Privacy Officer
59/13 Sathorn Road, Silom
Bang Rak, Bangkok 10500
Thailand

We aim to respond to all privacy inquiries within 30 days of receipt. For urgent privacy concerns, please indicate this in your communication subject line.

Governing Law

This Privacy Policy is governed by Thai law and regulations including the Personal Data Protection Act B.E. 2562 (2019). For disputes related to privacy practices, Thai courts in Bangkok have exclusive jurisdiction. We comply with applicable data protection regulations in Thailand and make reasonable efforts to accommodate privacy requirements for international guests where feasible.