Privacy Policy

Effective Date: Oct 7, 2025

This Privacy Policy describes how MAGIC RESORT (referred to as “we,” “us,” or “our”), a Thai Company operating in the tourism sector, collects, uses, processes, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, applicable French data protection laws (due to the website hosting in France), and the Thai Personal Data Protection Act (PDPA).

MAGIC RESORT, represented by its Publication Director, acts as the Data Controller responsible for the processing of your personal data. You may contact us at: contact at magicresortlamai.com

We may collect the following categories of personal data, depending on your interaction with our site and services:

• Identification and Booking Data: Your name, email address, phone number, address, passport/ID details (required for check-in under Thai law), and company name (if applicable), provided when you use our booking forms, contact forms, or confirm a reservation.
• Sensitive Data: Information regarding dietary restrictions, medical conditions, or disabilities provided to accommodate your stay. This data is collected strictly with your explicit consent.
• Connection and Navigation Data: Your IP address, browser type, operating system, pages visited on our website, visit timestamps, and other data collected via cookies and Google Analytics.
• Service Request Data: Information provided when you request a quote, specific services, or have special requirements related to your stay.

Your personal data is collected and processed for the following purposes:

• Reservation and Stay Management: To process and confirm your booking, fulfill our contractual obligations related to your resort stay, and provide guest services.
• Legal Compliance (Thailand): To comply with Thai legal and regulatory obligations, specifically guest registration requirements (e.g., providing passport data to local authorities).
• Contact and Inquiry Management: To respond to your inquiries (e.g., quotes, resort information) and manage customer relationships.
• Website and Service Improvement: To analyze website usage, understand user preferences, and enhance the quality and functionality of our website, which is hosted in France.
• Commercial Prospecting and Newsletters: To send you commercial communications and newsletters, strictly based on your explicit consent.

Your personal data is processed primarily by MAGIC RESORT personnel. We do not sell, rent, or otherwise disclose your personal data to third parties, except in the following circumstances:

• Technical Partners: We may share data with trusted technical partners (e.g., French hosting providers, booking engine platforms, payment processors, analytics services) who assist us in operating our website and delivering our services. These partners act strictly under our instructions and are bound by confidentiality obligations.
• Local Authorities (Thailand): We will disclose data if required to do so by Thai law, court order, or governmental regulation, particularly for mandatory guest registration.
• Legal Requirements (GDPR/CNIL): We may disclose your data if required to do so by French or EU law.

We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL Certificates for encrypted communication across the website.
• Password protection for user accounts and internal systems used for reservations.
• Internal procedures for secure data management and access control, adhering to international security standards.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Non Client Contact Data: Data from general inquiries and non-client contacts is typically retained for up to three (3) years after the last contact.
• Client Booking Data: Data related to commercial relationships with clients is retained for the duration of the legal retention period required by Thai and international accounting laws (e.g., up to five (5) years after the termination of the stay/business relationship).
• Navigation Data (Cookies): Data collected via cookies is retained according to the lifespan of each specific cookie, as detailed in our Cookie Policy.

Under the GDPR (for EU residents) and the Thai PDPA, you have the following rights regarding your personal data:

• Right of Access: To request access to the personal data we hold about you.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: To request the limitation of processing of your personal data under certain conditions.
• Right to Object: To object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to Withdraw Consent: To withdraw your consent at any time, where processing is based on consent (e.g., for marketing or sensitive data).
• Post Mortem Directives: To define directives regarding the fate of your personal data after your death (applicable under French law).

To exercise any of these rights, please contact us at contact at magicresortlamai.com. We will respond to your request within one (1) month of receipt.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French supervisory authority for data protection, if you believe your rights have not been respected, particularly concerning the data processed on our French-hosted website.

Our website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device to collect standard internet log information and visitor behavior information.

We categorize cookies as follows:

• Necessary Cookies: Essential for the website’s basic functionality (e.g., maintaining your booking cart).
• Performance/Statistical Cookies: Used to analyze website usage and performance (anonymized where possible).
• Marketing/Advertising Cookies: Used to display personalized content and advertising, requiring your explicit consent.

You can manage your cookie preferences through your browser settings or via the consent banner on our website. Please note that disabling certain cookies may affect the functionality and your experience on our website. For more detailed information, please refer to our dedicated Cookie Policy on our Legal Information page.

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements (Thai PDPA, GDPR, etc.). We encourage you to review this policy regularly to stay informed about how we are protecting your information.