Privacy Policy

Effective Date: October 15, 2025

‍1) Introduction & Scope

‍This Privacy Policy explains how SEA SUN AND SMILE CO., LTD. (Head Office), operating as Café del Mar Phuket (“Café del Mar,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit phuket.cafedelmar.com (the “Site”) or otherwise interact with us (e.g., reservations, inquiries, newsletter sign-ups, venue visits).
We are the data controller for personal information collected via the Site and in connection with our services and venue operations.By using the Site or providing information to us, you consent to this Policy and our processing of your information as described. We comply with applicable laws including Thailand’s Personal Data Protection Act (PDPA) and, to the extent they apply to you, the GDPR (EU/UK) and the CCPA/CPRA (California).

2) Information We Collect

A. Information you provide directly
Account/reservations/newsletters: Email address, phone number.
‍Optional details: First name, last name, country, postcode, preferences (e.g., music/venue interests), special requests or dietary notes provided voluntarily.
‍Communications: Content you send us by email, phone, chat, web forms, or social channels (e.g., inquiries, support requests, feedback).
‍B. Information collected automatically (online)
Technical & usage data: IP address, device and browser type, operating system, pages viewed, referring URLs, timestamps, general location (derived from IP), session duration, and similar diagnostic data.
‍Cookies & similar tech: Pixels, tags, SDKs, and identifiers that help the Site function, measure performance, personalize content, and support marketing (see Section 5).
‍C. Information collected at our venue
CCTV (security): Video recordings for safety and security.
‍Photography & videography (promotional): Photos and video may be taken at our venue for marketing and archival purposes (see Section 12).
‍On-site services: If you register for services (e.g., guest Wi-Fi), we collect the data needed to provide them (e.g., device identifiers, login details).We do not intentionally collect sensitive personal data through the Site. Please avoid submitting sensitive data via our forms.

3) Legal Bases for Processing (PDPA/GDPR)
‍Where required, we process personal data on one or more of the following bases:
‍Consent (e.g., marketing subscriptions, certain cookies);
‍Contract / steps at your request (e.g., reservations, confirmations, customer support);
‍Legitimate interests (e.g., site security, fraud prevention, audience analytics, improving services, direct marketing where permitted);
‍Legal obligations (e.g., tax, accounting, safety, regulatory requests).
‍
4) How We Use Your InformationProvide & administer services: reservations, confirmations, guest lists, essential updates, customer support.
‍Marketing communications: newsletters, updates, and promotions about Café del Mar Phuket (email/SMS). You can unsubscribe at any time (see Section 6).
‍Safety & security: venue protection, incident investigation, fraud/ticket-touting prevention, enforcing terms and policies.
‍Analytics & improvement: understanding audience engagement, enhancing content and user experience, optimizing campaigns and operations.
‍Compliance: satisfying legal, regulatory, tax, and accounting requirements.

5) Cookies & Similar Technologies
‍We use cookies, pixels, and similar tools on the Site. These may be set by us or our partners (for example, hosting, analytics, and advertising platforms).
‍Types of cookies:
Strictly necessary: Enable core functionality (e.g., page navigation, form submissions).
‍Performance/analytics: Measure traffic and usage (e.g., session counts, pages visited).
‍Functionality/personalization: Remember choices to improve your experience.
‍Advertising/retargeting: Deliver or measure ads and prevent duplicates.
‍Typical tools:Analytics: e.g., Google Analytics or comparable services (aggregated usage insights).
‍Advertising pixels: e.g., Meta (Facebook/Instagram) pixel for ad measurement/retargeting.
‍Your controls:Manage cookies in your browser settings (block, delete, or send Global Privacy Control/“Do Not Track” signals, where supported).Opt out of analytics/ads via each provider’s opt-out mechanisms and your mobile/OS ad settings.Our cookie banner (where shown) lets you accept/reject non-essential cookies. Strictly necessary cookies function regardless of consent.

6) Marketing (Email & SMS) / Mailchimp
‍We use Mailchimp to manage email communications and subscriber lists. When you subscribe, your email address (and, if provided, your name and preferences) are stored and processed by Mailchimp to send you newsletters and updates.
Unsubscribing: Every marketing email includes an unsubscribe link. You may also contact us to opt out of marketing at any time. Unsubscribing from marketing does not affect essential service messages.

7) Sharing & Disclosure
‍We do not sell your personal information.We may share information with:
‍Service providers / processors: e.g., website hosting/CMS, email/SMS platforms (Mailchimp), analytics/ad tech, reservation/ticketing tools, cloud storage, security vendors. They are contractually bound to use data only to provide services to us and to protect it.
‍Partners (limited): Where operationally necessary (e.g., a hospitality partner or sponsor for a guest benefit), we may share minimal, relevant details.
‍Legal & safety: To comply with laws, lawful requests, or to protect rights, safety, and security.
‍Business transfers: If we undergo a merger, acquisition, or asset sale, your data may transfer as part of the transaction, subject to this Policy.

8) International Data Transfers
‍We operate in Thailand and use global service providers. Your information may be transferred to and processed in countries outside your own (including the EU/UK or the United States). We take reasonable steps to ensure appropriate safeguards for such transfers (e.g., contractual protections) and that your information remains protected in accordance with this Policy.

9) Retention
‍We retain personal information only as long as necessary for the purposes set out in this Policy or as required by law:
‍Reservation/account/newsletter data: kept through relevant transactions and a reasonable period thereafter for support, accounting, and to inform you about future news (if you remain subscribed).
‍Marketing data: retained until you unsubscribe or request deletion (and for a short period after to record your opt-out).
‍Security/log data: retained for a limited period for diagnostics, security, and fraud prevention.
Where feasible, we anonymize or aggregate data for analytics so it no longer identifies you.

10) SecurityWe implement administrative, technical, and physical safeguards designed to protect personal information (e.g., access controls, encryption in transit where applicable, secure hosting). No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials used on our Site.

11) Your Rights
A. PDPA/GDPR (EEA/UK/Thailand)
‍Subject to limitations under law, you may have the right to:
‍Access your personal data;
‍Rectify inaccurate or incomplete data;
‍Erase data in certain circumstances;
‍Restrict processing in certain circumstances;
‍Object to processing (including direct marketing);
‍Data portability (receive data in a machine-readable format and/or have it transmitted to another controller, where technically feasible);
‍Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing).
‍B. CCPA/CPRA (California)
‍California residents may have the right to:
‍Know categories and specific pieces of personal information we collect/use/disclose;
‍Delete personal information (subject to exceptions);
‍Correct inaccurate personal information;
‍Opt out of “sale” or “sharing” for cross-context behavioral advertising (we do not sell personal information and only use ad/analytics tools as described);
‍Limit use/disclosure of sensitive personal information (we do not intentionally collect it via the Site);
‍Non-discrimination for exercising your rights.
‍How to exercise your rights: See Section 15 (Contact Us). We may need to verify your identity before acting on your request. We will respond within the time limits set by applicable law. You may also have the right to lodge a complaint with your local supervisory authority.

12) Venue Photography,
Videography & CCTVCCTV: Operates for venue safety and security. Signage will indicate monitored areas.
‍Promotional filming & photography: By entering the venue, you acknowledge that you may be photographed or filmed and that your image/likeness may appear in Café del Mar Phuket promotional materials (e.g., social media, websites, press, future campaigns). We aim to be respectful and avoid close-ups without permission where feasible. If you prefer not to be featured, please speak with onsite staff; we will use reasonable efforts (e.g., directing you to non-filming areas or avoiding identifiable use upon request). This does not limit our legitimate interests in documenting and promoting our venue.

13) Children’s Privacy
‍Our Site and venue are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

14) Changes to This Policy
‍We may update this Policy from time to time. Changes will be posted on this page with a revised Effective Date. Significant changes may also be communicated via a notice on the Site or by email where appropriate. Your continued use of the Site after changes means you accept the updated Policy.

15) Contact Us
SEA SUN AND SMILE CO., LTD. (Head Office)
Operating as Café del Mar Phuket
Address: 118/19, Moo 3, Kamala, Kathu District, Phuket 83150, Thailand
Phone: +66 (0)93 580 4486

Tax ID: 0835559008641For privacy requests or questions (including access, correction, deletion, objections, consent withdrawal, or CCPA requests), please contact us using the details above (or the contact method provided on our Site). If any part of this Policy conflicts with mandatory local law, the applicable local law controls to the extent of the conflict.