Legal
Privacy Policy
Last updated: 4 July 2026
This Privacy Policy explains how Elephant Beach Club & Resort (“we”, “us”) collects and processes your personal data when you browse our website, stay with us or use our services. We comply with Thailand’s Personal Data Protection Act (PDPA) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
Data we collect
We collect the information you provide directly, name, contact details, booking and payment information, and data gathered automatically, such as your IP address, device and browsing activity through cookies.
How we use your data
We use your data to process reservations and payments, deliver our hospitality services, answer your enquiries, meet our legal obligations and, with your consent, send you offers and news.
Bookings & payments
Reservation and payment data is used to confirm and manage your stay. Card payments are processed by our secure payment provider, Stripe; we do not store full card numbers.
Cookies & analytics
We use essential cookies to operate the site and, with your consent, analytics cookies to understand how it is used. You can manage cookies at any time in your browser settings.
Sharing your data
We share data only with service providers acting on our behalf (booking, payment, IT) and where required by law. We never sell your personal data.
Retention & security
We keep personal data only as long as necessary for the purposes described above and apply appropriate technical and organisational measures to protect it.
Your rights
Subject to applicable law, you may access, correct, delete or port your data, object to or restrict its processing, and withdraw your consent at any time. EU visitors additionally benefit from the rights granted by the GDPR.
Contact
To exercise your rights or ask a question, contact us at info@elephantbeachresort.com. Address: 159 Chaweng Beach Rd, Bo Put, Koh Samui, Surat Thani 84320.