Privacy policy

Who is responsible

The owners of No.31 Bangkok, a private holiday rental in Pinklao, Bangkok, decide how and why your information is used — in data-protection language, we are the controller. Write to us at inquiry@no31bangkok.com about anything in this policy.

What we collect

When you send a booking request: your name, email address, country, the dates and number of guests, and anything you write in the message.

When you book: the same, plus your payment, which Stripe processes. We receive a confirmation, the last four digits of the card and its expiry — never the full number.

Before or during your stay: an image of the photo page of the passport of every guest, children included, and the messages you send us through your guest area.

Automatically: our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting. The website sets no advertising or tracking cookies; the only cookie we use keeps you signed in to your guest area. We also keep our own count of how many times each page is opened and which website sent you — counts only, held on our own server, with no cookie, no identifier and no third party involved, so no individual visitor can be picked out of them. If your browser asks not to be tracked, you are not counted at all.

Why we use it, and on what legal basis

To answer your enquiry and to provide the stay you booked — necessary to perform our contract with you.

To notify the Thai Immigration Bureau of a foreign guest's stay within 24 hours of arrival, using form TM.30 — a legal obligation under the Immigration Act. We cannot host you without it.

To take payment and to charge for damage where our terms allow — performance of the contract and our legitimate interest in recovering genuine loss.

To keep accounting records — a legal obligation under Thai tax law.

We do not use your information for marketing, we do not profile you, and we never sell it.

Who else sees it

Stripe, for payment processing. Our hosting provider, which stores the site and its data. Our email provider, which carries messages between us. The Thai Immigration Bureau, which receives the TM.30 notification. Our housekeeping team may see your name and dates in order to prepare the house. Nobody else, unless the law requires it.

These providers operate outside Thailand, so your information may be processed abroad. Where that involves data moving out of Europe, it is covered by the providers' own approved transfer arrangements.

How long we keep it

Passport images: kept only as long as the law requires, then deleted automatically. We need them to report your stay to Thai immigration, and now and then to answer the police about a past stay.

Booking records and messages: kept while you are a guest and afterwards for as long as a dispute or a tax enquiry could reasonably arise.

Accounting records: as long as Thai tax law requires.

Enquiries that never become bookings: deleted within 12 months.

We do not keep anything “just in case”.

How it is protected

The website is served over an encrypted connection. Passport images are stored in a folder above the website, which the web server cannot serve at all, under names nobody can guess, and can only be opened by us after signing in to our management site. Payment card numbers never reach our server. Access to the management site is limited to the owners.

Your rights

You may ask us what we hold about you and receive a copy; ask us to correct anything wrong; ask us to delete it, where we are not required to keep it; object to or ask us to restrict a particular use; and, if you are in Europe, receive your data in a portable form. Where we rely on consent — as we do for storing your passport image beyond the immigration filing — you may withdraw it at any time.

Write to inquiry@no31bangkok.com and we will reply within 30 days. If you are not satisfied, you may complain to Thailand's Personal Data Protection Committee, or to the data protection authority in your own country if you are in Europe.

Children

We collect a child's name and passport image only because Thai immigration law requires every foreign guest to be reported, whatever their age. It is used for that notification and nothing else, is never used for marketing, and is deleted on the same schedule as everyone else's.

Changes

If we change this policy we will post the new version here and change the date below. The date tells you which version applied during your stay.