Privacy Policy

Last updated: 17 July 2026

1. Data Controller

For the purposes of the PDPA, Dreamaway Co., Ltd. acts as the Data Controller for personal data collected through the Platform.

Dreamaway Co., Ltd.

Registered Office: 449/30 Moo 12, Nongprue, Banglamung, Chonburi 20150, Thailand

Website: https://dailyvillas.com

Email: reservations@dailyvillas.com

2. Scope of this Privacy Policy

This Privacy Policy applies to:

- Visitors to the Platform;

- Guests making booking requests or reservations;

- Accommodation Providers listing accommodation on the Platform;

- Users communicating with Daily Villas.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from the Platform.

3. Personal Data We Collect

We collect only personal data that is relevant, adequate, and limited to what is reasonably necessary for the purposes described in this Privacy Policy.

3.1 Information You Provide Directly

We may collect:

- Full name;

- Email address;

- Telephone number;

- Booking requests and reservation details;

- Communications with customer support;

- Information voluntarily submitted through contact forms, enquiries, or account registration.

- Payment information required to facilitate bookings may also be collected. However, payment card details are processed directly by our third-party payment service providers and are not stored on Daily Villas' servers.

3.2 Information Collected Automatically

When you use the Platform, we may automatically collect information including:

- IP address;

- Browser type;

- Device type;

- Operating system;

- Language preferences;

- Log files;

- Timestamps;

- Website usage information;

- Cookie identifiers.

3.3 Information Collected from Third Parties

We may receive personal data from trusted third parties, including:

- Payment confirmations from payment service providers;

- Fraud prevention and identity verification services;

- Security service providers;

- Accommodation Providers where necessary to verify availability, process reservations, or resolve disputes.

4. Purpose of Processing Personal Data

Daily Villas processes personal data only where reasonably necessary for legitimate business purposes, including:

- Operating, maintaining, and improving the Platform;

- Receiving and processing booking requests;

- Verifying availability and pricing with Accommodation Providers;

- Facilitating accommodation reservations;

- Collecting and processing payments through authorized payment service providers;

- Confirming reservations with Guests and Accommodation Providers;

- Facilitating payment to Accommodation Providers;

- Providing customer support;

- Sending booking confirmations and service-related communications;

- Preventing fraud, abuse, unauthorized access, and security incidents;

- Resolving disputes;

- Complying with legal, regulatory, tax, and accounting obligations.

We do not process personal data for purposes unrelated to those described in this Privacy Policy unless permitted or required by applicable law.

5. Legal Basis for Processing

Daily Villas processes personal data on one or more of the following legal bases under the PDPA:

- Performance of a contract;

- Compliance with legal obligations;

- Legitimate interests, including platform security, fraud prevention, service improvement, and protection of our legal rights;

- Consent, where required by law.

Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal or contractual limitations.

6. Disclosure of Personal Data

We may disclose personal data where reasonably necessary to:

- Accommodation Providers for the purpose of verifying availability, confirming reservations, providing accommodation services, and fulfilling bookings;

- Payment processors and financial institutions;

- Cloud hosting providers;

- IT service providers;

- Communication service providers;

- Analytics providers;

- Professional advisers, including legal and accounting advisers;

- Government authorities, regulators, or law enforcement agencies where required by law.

Our service providers and business partners process personal data only to the extent necessary to provide their respective services or comply with applicable legal obligations.

Daily Villas does not sell personal data to third parties.

7. Accommodation Providers

Daily Villas works with independent Accommodation Providers.

To process a booking request or reservation, Daily Villas shares relevant personal data with the selected Accommodation Provider for the purposes of:

- verifying availability and pricing;

- confirming reservations;

- facilitating check-in and guest communications where necessary;

- complying with applicable legal obligations.

Accommodation Providers are independent businesses and are responsible for the processing of personal data under their control in accordance with their own privacy practices and applicable laws.

8. Cross-Border Transfers

Some of our service providers may process or store personal data outside Thailand, including cloud hosting providers, payment service providers, and other technology partners.

Where personal data is transferred outside Thailand, Daily Villas will take reasonable steps to ensure that such transfers are carried out in accordance with applicable provisions of the PDPA and other applicable laws.

9. Data Retention

We retain personal data only for as long as reasonably necessary to:

- fulfil the purposes described in this Privacy Policy;

- comply with legal, regulatory, tax, or accounting obligations;

- resolve disputes;

- enforce our agreements.

Booking records and related communications may be retained for up to ten (10) years, or for such other period as required or permitted by applicable law.

When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable law.

10. Data Security

Daily Villas takes reasonable administrative, technical, and organizational measures designed to help protect personal data against unauthorized access, disclosure, alteration, misuse, or loss.

The specific security measures implemented may vary depending on the nature of the information processed, the services used, and technological developments.

While we strive to protect personal data using commercially reasonable practices, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, DailyVillas cannot guarantee absolute security.

11. Your Rights Under the PDPA

Subject to the PDPA and other applicable laws, you may have the right to:

- Request access to your personal data;

- Request correction of inaccurate or incomplete personal data;

- Request deletion, destruction, or anonymization of personal data where permitted by law;

- Request restriction of certain processing activities;

- Object to certain processing activities;

- Withdraw consent where processing is based on consent;

- Request data portability, where applicable.

Requests may be submitted using the contact details provided below.

Certain rights may be limited where permitted by applicable law.

12. Cookies and Similar Technologies

The Platform uses cookies and similar technologies to:

- Operate essential website functions;

- Analyze website usage and performance;

- Remember user preferences;

- Improve the overall user experience.

If marketing or advertising cookies are used, they will be implemented in accordance with applicable law.

You may control or disable cookies through your browser settings. Please note that certain features of the Platform may not function correctly if essential cookies are disabled.

13. Third-Party Links

The Platform may contain links to third-party websites or services.

Daily Villas is not responsible for the privacy practices, security, or content of third-party websites or services. Users should review the privacy policies of those third parties before providing personal data.

14. Children's Personal Data

The Platform is not intended for individuals under the age of 20 years, or the age of legal capacity under applicable Thai law, unless appropriate parental or legal guardian consent has been obtained where required by law.

Daily Villas does not knowingly collect personal data from children in violation of applicable law.

15. Complaints

If you believe that Daily Villas has processed your personal data in violation of applicable law, you may contact us using the details below.

You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) or another competent authority where permitted by law.

16. Limitation of Liability

Nothing in this Privacy Policy limits, excludes, or modifies any rights or remedies available to data subjects under the PDPA or any other applicable law.

Any limitation of liability shall apply only to the maximum extent permitted by applicable law.

17. Changes to this Privacy Policy

Daily Villas may update this Privacy Policy from time to time to reflect changes in our services, business operations, or applicable legal requirements.

The most recent version will always be published on the Platform together with the revised "Last updated" date.

Where required by law, we will provide additional notice before material changes become effective.

18. Contact Us

If you have any questions regarding this Privacy Policy, wish to exercise your rights under the PDPA, or have concerns regarding the processing of your personal data, please contact:

Dreamaway Co., Ltd.

Registered Office: 449/30 Moo 12, Nongprue, Banglamung, Chonburi 20150, Thailand

Website: https://dailyvillas.com

Email: reservations@dailyvillas.com