Last updated: 29 September 2026
This Privacy Policy explains how Carpe Diem Beach Club Phuket (“we”, “us”, “our”) collects, uses, discloses and protects your personal data when you visit carpediemphuket.com, make a booking, or contact us. It is issued under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
1. Data controller
Carpe Diem Beach Club Phuket
99/1 Bangtao Beach Road, Choeng Thale, Thalang, Phuket 83110, Thailand
Email: inquiries@carpediemphuket.com
2. Personal data we collect
| Source | Personal data |
|---|---|
| Table and event bookings (through our booking provider Weeloy) | Title, first and last name, email, mobile number, booking details (date, time, number of guests, area or package), special requests, date of birth (optional, for celebrations), your marketing preference, and payment status. Card details are entered directly with the payment provider. We do not receive or store full card numbers. |
| Contact form | Name, email, telephone number, type of enquiry and your message |
| Email, phone and messaging | The contact details and content of your communication |
| Website use (only with your consent, see our Cookie Policy) | Online identifiers, IP address, device and browser information, pages visited, and the channel that brought you to our website |
Health information. If you tell us about allergies or dietary requirements in a special request, this may be health data, which is sensitive data under Section 26 of the PDPA. We use it only to prepare your visit safely, and only with your explicit consent, which you give by providing it. Please share only what is necessary.
3. Why we use your data, and the legal basis
| Purpose | Legal basis (PDPA) |
|---|---|
| Taking, managing and confirming your booking, including bookings that require our manual confirmation, and processing deposits, cancellations and refunds | Performance of a contract (Section 24(3)) |
| Answering your enquiries | Performance of a contract or steps before one (Section 24(3)), or our legitimate interests (Section 24(5)) |
| Keeping accounting and tax records | Legal obligation (Section 24(6)) |
| Protecting our guests, staff and business, and preventing fraud | Legitimate interests (Section 24(5)) |
| Sending you offers and event news | Your consent (Section 19), given through the marketing option in the booking form. You can withdraw it at any time. |
| Website analytics and advertising measurement (Google Analytics, Google Ads, Meta Pixel) | Your consent (Section 19), through the cookie banner |
| Allergy and dietary information | Your explicit consent (Section 26) |
If you do not provide the details needed for a booking, we may not be able to accept or manage it.
4. Who we share your data with
We share personal data only as needed for the purposes above, with:
- Weeloy / eRestaurants, our booking system provider, and the payment providers it uses to process deposits and payments;
- Google (Google Analytics, Google Ads, Google Maps) and Meta (Facebook, Instagram), only as described in our Cookie Policy and only with your consent;
- our IT, hosting and email service providers;
- other companies of the Carpe Diem Collection, where needed to handle your request;
- authorities or advisers, where the law requires it or to protect our legal rights.
We require our service providers to protect your data and to use it only on our instructions. We do not sell your personal data.
5. Transfers outside Thailand
Some of our providers (such as Google, Meta and Weeloy) may store or process data outside Thailand. When this happens, we make sure it complies with Sections 28–29 of the PDPA. We rely on the recipient’s adequate data protection standards, on appropriate safeguards such as standard contractual terms, or, where applicable, on the performance of a contract with you.
6. How long we keep your data
| Data | Retention |
|---|---|
| Booking records | Up to 5 years after your booking, to meet accounting and tax requirements |
| Enquiries and correspondence | Up to 2 years after our last contact |
| Marketing preferences | Until you withdraw consent or unsubscribe |
| Website analytics data | As set out in our Cookie Policy (Google Analytics: up to 14 months) |
After these periods, we delete or anonymise the data.
7. Your rights
Under the PDPA, you have the right to:
- withdraw your consent at any time;
- access your personal data and obtain a copy;
- receive your data in a portable format;
- object to processing;
- ask us to delete, destroy or anonymise your data;
- restrict processing;
- ask us to correct your data;
- lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
To exercise these rights, email inquiries@carpediemphuket.com. We may need to verify your identity. We will respond within 30 days. Withdrawing consent does not affect processing that took place before you withdrew it.
8. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access or disclosure. If a personal data breach occurs, we will notify the PDPC and affected individuals where required by the PDPA.
9. Children
Our website and booking services are intended for adults. We do not knowingly collect personal data from minors without the consent of a parent or guardian, as required by the PDPA. If you believe a minor has given us personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be highlighted on this page.
11. Contact
For any question about this policy or your personal data, write to inquiries@carpediemphuket.com or to our address in section 1.