Data Subject Request
June 2026 · The Blue Spice Samui, Koh Samui
Under Thailand's Personal Data Protection Act (PDPA) B.E. 2562 and applicable privacy law, you have the right to request access to, correction of, deletion of, or restriction on the processing of your personal data held by The Blue Spice.
Your Rights
Right to Access
You may request a copy of the personal data we hold about you, including your reservation details, contact information, and any communications we have sent or recorded.
Right to Correction
If any of your personal data is inaccurate or incomplete, you may ask us to correct it.
Right to Deletion
You may request that we delete your personal data. We will do so unless we are required to retain it for a legal reason.
Right to Restrict Processing
You may ask us to stop using your data in certain ways while a dispute or correction request is being resolved.
Right to Object
Where we process your data on the basis of legitimate interest, you may object to that processing. We will consider your objection and respond within 30 days.
Right to Withdraw Consent
Where we process your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
How to Submit a Request
There is currently no automated online form for data subject requests. Please contact us directly using the details below. Include enough information for us to identify your data.
The Blue Spice Samui
24, 37, Tambon Bo Put, Chang Wat Surat Thani 84320, Thailand
info@thebluespice.comWhatsApp: +66 63 106 5503Response Time
We will acknowledge your request within 5 business days and aim to respond in full within 30 days.
What Data We May Hold About You
If you made a reservation through our website, we may hold:
- Your name, email address, and WhatsApp number.
- Your reservation date, time, party size, and any special requests or notes.
- The page you were on, device type, and locale at the time of submission.
- A record of consent you gave when submitting the form, including the consent version and timestamp.
- Communication records: a record of any staff notifications sent internally on your behalf.
Limitations
We can only act on requests relating to data that we hold directly. Data held by our service providers — such as Replit, Neon, Resend, or Google — may be subject to their own privacy policies and data subject request processes.
PDPA Reference
Thailand's Personal Data Protection Act (PDPA) B.E. 2562 grants data subjects the rights described above. If you believe we have not handled your personal data in accordance with the PDPA, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand. pdpc.or.th.
Related legal documents: