Legal

Privacy policy

Last updated: [date to be added]

This policy explains what personal data I collect through this site and how it is handled. It reflects UK GDPR (the data controller is a UK company) and, where relevant, EU GDPR and Thailand's PDPA. [Confirm final wording with a legal adviser before publishing.]

Who I am

The data controller is A & M BROSS LTD, registered in Scotland (No. SC630950), registered office [Edinburgh, New Town — full address to be added], trading as Phuket Golf Concierge.

Contact: [email to be added] · WhatsApp +66 94 295 5081.

What I collect

Only what you enter in the enquiry form: your name, your contact (email or WhatsApp), your planned dates, party size and your message. Nothing more, and no tracking beyond what is strictly necessary to run the site.

Passports & Thai immigration

Before arrival, I collect a copy of each guest's passport. This is used strictly to meet Thai immigration requirements — accommodation registration known as TM30 — and for nothing else. Copies are held only as long as that obligation requires, then deleted. [Confirm handling and retention with your villa partners and a legal adviser.]

Why I use it, and the legal basis

Your details are used solely to respond to your enquiry and to arrange a stay. The legal basis is your consent, given when you submit the form, and my legitimate interest in replying to you.

How long I keep it

Your details are kept only as long as needed to handle your enquiry and any stay that follows, then deleted. [State a specific retention period, e.g. 24 months after last contact.]

Who sees it

Your data is not sold and not shared for marketing. It may be handled by the services used to run this site and to arrange your stay. [List any processors — e.g. email provider, form service — once chosen.]

Your rights

You may ask to access, correct or delete your data, or to withdraw consent, at any time — just write to the contact above and it will be actioned. If you are in the UK or EU, you may also complain to a supervisory authority, such as the UK Information Commissioner's Office (ICO). [Add Thailand PDPA authority reference if targeting Thai residents.]

Changes

Any updates to this policy will appear on this page, with the date above revised.