Privacy policy

Cape Beach Villa is operated by CAPE LUXE CO., LTD., 78 Moo 5, Baan Tai Beach, Maenam, Koh Samui, Surat Thani 84330, Thailand — the data controller for the personal data described here.

For any privacy request, contact us at booking@capeawaysamui.com or +66 81 884 5321.

Depending on how you contact and stay with us, we may collect:

• Contact details you give us — your name, email, phone number and messaging IDs — when you send an enquiry or booking request.
• Booking and stay details — dates, villa, guest numbers and any preferences or requests.
• Identification and date of birth at check-in, where this is required by law.
• Payment information — processed by our booking and payment providers; we do not store full card numbers.
• Website data — basic technical information, functional cookies (for example from our embedded booking engine) and, with your consent, statistics cookies, when you use this site.

We use your personal data to respond to enquiries, take and manage your booking, communicate with you about your stay, process payments, meet our legal and tax obligations, and improve this website.

Our legal bases for processing are your consent, the performance of your booking, and compliance with legal obligations.

This website uses essential and functional cookies to keep the site working, including cookies set by our embedded booking engine. With your consent, we also use statistics cookies from Google Analytics to understand how the site is used. You can decline, and nothing is stored for statistics before you decide. You can change your choice at any time using the “Cookie settings” link in the footer, or by clearing this site’s data in your browser settings.

With your consent we use Google Analytics 4, a service of Google Ireland Limited, to measure how this website is used: which pages are viewed, which buttons are clicked, which language is chosen, and whether an enquiry or a booking is completed. We also record clicks on the map or a route link, which way you choose to reach us (phone, WhatsApp or e-mail), and what kind of enquiry you send. Google’s enhanced measurement also automatically records how far you scroll down a page, whether you click through to another provider’s website, and whether you download a file. Before you consent we do not load the Google Analytics script at all, so no request goes out to the measurement service. Google Analytics does not store IP addresses. We have switched off Google Signals, so your activity is not linked across devices, and we do not share this data with Google for advertising purposes.

When a booking is completed, our embedded booking engine reports your booking number and the amount back to us, and we pass both on to Google Analytics. That way we can see which route led to a booking and what it was worth. Your name, your e-mail address and your telephone number are not part of it.

We keep this measurement data for 14 months. Independently of your consent, our web server records that a form was submitted — the type, the language and the time, without any name, e-mail address, telephone number or IP address. It likewise records whether consent was given or declined on the consent banner — again only the decision, the language and the time. That tells us how meaningful the statistics are. This is our legitimate interest in knowing whether the website works, and it cannot identify you.

We share personal data only where needed: with our booking and payment providers, with the agency that looks after this website, with service partners who help deliver your stay, and where the law requires it. We do not sell your personal data.

The agency receives a copy of every enquiry you send through this website, with the same details you entered in the form. It is based in Germany and uses the copy for the technical upkeep of the forms: to check that enquiries arrive and are delivered correctly.

On our Location page a Google Maps map is embedded directly in the page. When you open that page and the map is shown, your browser connects to Google and sends your IP address so that the map can load. Because the map is part of the page, this happens regardless of your choice at the consent banner. The provider is Google, and Google’s privacy terms apply to this processing. If you would rather avoid it, do not open the Location page. Our address is also in the Legal notice and at the top of this policy, and the “Open in Google Maps” link reaches Google only after you click it.

The booking engine on this website is provided by Sirvoy, as the booking page also states. When you open the booking page or the booking window, your browser connects to Sirvoy and sends your IP address so that availability and prices can load. What you enter there (your travel dates, your name, your contact details and your payment details) is processed by Sirvoy so that your booking can be made. We do not store full card numbers ourselves. Unlike the statistics, this connection is necessary for the booking: without it nobody can book.

We keep personal data only as long as needed for your booking and to meet our legal and accounting obligations, after which it is securely deleted.

You can ask us to access, correct, delete or restrict your personal data, object to processing, withdraw a consent you have given, or receive a copy of the data you provided. To exercise any of these rights, contact us using the details above.

If you are in the EU or EEA, you also have the right to lodge a complaint with your local data-protection authority.

We may update this policy from time to time. The current version always appears on this page.