Privacy Policy

1. Introduction

The Xcape River Kwai Hotel ("the Hotel," "we," "us," or "our"), operated at 138, Moo4, Nong Ya, Mueang Kanchanaburi District, Kanchanaburi 71000, Thailand, is committed to protecting the privacy and personal data of all guests, visitors, and users of our website (www.xcapehotels.com) and services.

accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), and internationally recognised best practices.

By using our website, making a reservation, or staying at The Xcape River Kwai Hotel, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Personal Data You Provide Directly

We collect personal data that you voluntarily provide when you :

• • Make a reservation online, by phone, email, or through a third-party booking platform
• • Complete check-in or registration at the hotel
• • Submit an enquiry via our website contact form or email
• • Sign up for newsletters or marketing communications
• • Book wellness treatments, dining experiences, or activities
• • Attend meetings, events, or weddings hosted at the hotel

The types of personal data collected may include :

• • Full name, date of birth, and nationality
• • Passport or national identification number
• • Contact details: email address, telephone number, postal address
• • Payment and billing information
• • Dietary requirements, health considerations, or special requests
• • Guest preferences and stay history

2.2 Data Collected Automatically

When you visit www.xcapehotels.com, we may automatically collect :

• • IP address, browser type and version, device type
• • Pages viewed, referring URLs, and time spent on pages
• • Cookie identifiers and session data (see Section 7)
• • Approximate geographic location based on IP address

2.3 Data from Third Parties

We may receive personal data about you from :

• • Online travel agencies and booking platforms (e.g., Agoda, Booking.com, Expedia)
• • Corporate clients or event organisers making reservations on your behalf
• • Social media platforms if you engage with our pages or log in via social authentication

3. How We Use Your Information

We process your personal data for the following purposes and on the following legal bases :

Performance of a Contract :

• • Processing and managing your reservation, check-in, and check-out
• • Providing accommodation, dining, wellness, and other requested services
• • Processing payments and issuing invoices or receipts

Legitimate Interests :

• • Improving our services, facilities, and guest experience
• • Maintaining safety and security across the property
• • Fraud prevention and detection
• • Internal analytics and business reporting

Compliance with Legal Obligations :

• • Meeting requirements under Thai immigration and tourism regulations
• • Retaining financial records as required by law
• • Responding to lawful requests from government or regulatory authorities

Consent (where obtained) :

• • Sending promotional emails, special offers, and newsletters
• • Using your photographs or testimonials in marketing materials
• • Targeted advertising through digital platforms

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share your information with :

• • Service Providers: Third-party vendors who assist us in operating our website, processing payments, managing reservations, or delivering communications — bound by data processing agreements
• • Unicorn Hotels & Resorts: Our parent hotel management group, for operational and quality- management purposes
• • Government and Regulatory Bodies: Thai immigration authorities, local government offices, or law enforcement when required by law
• • Professional Advisors: Legal counsel, auditors, and insurers under appropriate confidentiality obligations
• • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant parties

5. International Data Transfers

In some circumstances, your personal data may be transferred to or processed in countries outside Thailand. Where this occurs, we take appropriate safeguards to ensure your data receives an equivalent level of protection, including the use of standard contractual clauses or other approved transfer mechanisms under the PDPA.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by Thai law :

• • Guest reservation and stay records: 5 years from the date of departure
• • Financial and payment records: 5–7 years as required for accounting and tax purposes
• • Marketing opt-in records: Until you withdraw consent
• • CCTV footage: Up to 30 days, unless required for an ongoing investigation

After the applicable retention period, data is securely deleted or anonymised.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. The types of cookies we use include :

• • Essential Cookies: Required for the website to function correctly (e.g., session management, booking forms)
• • Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• • Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include :

• • Secure Sockets Layer (SSL) encryption for all data transmitted via our website
• • Access controls limiting data access to authorised personnel only
• • Regular security reviews and staff training on data protection obligations
• • Password-protected systems and secure data storage

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

9. Your Rights Under the PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights :

• • Right of Access: To request a copy of the personal data we hold about you
• • Right to Rectification: To request correction of inaccurate or incomplete data
• • Right to Erasure: To request deletion of your data, subject to legal retention obligations
• • Right to Restriction: To request that we limit the processing of your data in certain circumstances
• • Right to Portability: To receive your data in a structured, commonly used, machine-readable format
• • Right to Object: To object to processing based on our legitimate interests or for direct marketing purposes
• • Right to Withdraw Consent: Where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

10. Children's Privacy

Our website and services are not directed at children under the age of 10. We do not knowingly collect personal data from children without the consent of a parent or legal guardian. If you believe we have inadvertently collected personal data from a child, please contact us and we will take prompt steps to delete such information.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, booking platforms, or social media pages. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party sites and encourage you to review their respective privacy policies before providing any personal data.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us at :

The Xcape River Kwai Hotel

• 138, Moo4, Nong Ya, Mueang Kanchanaburi District, Kanchanaburi 71000, Thailand
• Tel: 034 552 124
• Email: stay@xcapehotels.com
• Website: www.xcapehotels.com

We will endeavour to address your enquiry promptly and fairly.

13. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be posted on our website with the updated effective date. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the revised Policy.