Privacy Policy

Effective 1 August 2026 · Last updated 29 October 2026

Sina Floating Beach Club (“Sina”, “we”, “us”) operates the floating beach club at 999 M.1 Nongprue, Banglamung, Chonburi 20150, Thailand, and the website at sinabeach.com. This policy explains what personal data we collect when you visit our site or make a booking, how we use it, and the rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Data we collect

• Booking details - your name, email, phone/WhatsApp number, nationality, party size, chosen date, spaces, passes and any special-occasion notes you provide.
• Payment information - processed by our payment provider, Stripe. We do not see or store your full card number.
• Sina Commune sign-up - your name, email, date of birth, nationality and gender, and whether you agreed to receive our news.
• Visit statistics (every visitor) - our own counter, which uses no cookies, records the pages you view, the booking steps you reach, your device type and browser, how you arrived (for example from a search, social media, another website or an ad) and your approximate city and country, worked out from your IP address. Your IP address itself is not stored. A random id for the visit is kept in your browser tab and cleared when you close it. If you complete a booking, the visit is linked to your booking reference.
• Booking channel (every visitor) - when you arrive through one of our links or a Google ad, your browser keeps the link's channel tag and the Google ad click id for up to 90 days, and we record them with your booking so we know which channels bring bookings. We do not send this record to advertising networks.
• Analytics and advertising tags (only with your consent) - see “Cookies” below.
• Marketing emails - whether our marketing emails are opened and which links in them are clicked.
• Approximate location - the city and country your booking is made from, derived from your IP address.

2. How we use your data

• To process and confirm your booking and send you your confirmation and boarding pass.
• To prepare the passenger/boarding manifest and meet safety and insurance requirements for a vessel on the water.
• To contact you about your reservation, changes, or a follow-up on your visit.
• To contact you if a booking you started was not completed or a payment did not go through - to help you finish it, resolve the issue, or understand what happened.
• To send marketing communications and news, where you have consented.
• To understand how our website is used and which channels and ads bring bookings, so we can improve the site and our marketing.
• To comply with legal, tax and regulatory obligations.

3. Legal bases (PDPA)

We rely on: performance of our booking contract with you; your consent, for marketing emails and for the Analytics and Marketing tags described under “Cookies” (you may withdraw it at any time); our legitimate interests in running and securing the venue and in the cookie-free visit statistics and booking-channel record described in section 1, which tell us how the site is used and which channels work without building an advertising profile of you; and compliance with legal obligations.

4. Who we share it with

We share data only as needed with:

• Stripe, our payment processor.
• Amazon Web Services (website hosting and email delivery) and Neon (database hosting).
• Google (Google Analytics, Google Ads and Google Tag Manager) - only if you allow Analytics or Marketing.
• Meta (the Meta Pixel, for Facebook and Instagram ads) - only if you allow Marketing.
• If you allow Marketing and complete a booking, we share your email, phone number and the booking value with Google and Meta through our tag manager, so they can match the booking to an ad you saw.
• Our staff, and the agency that runs our marketing on our behalf, who manage bookings and campaigns.

We do not sell your personal data. Some providers process data outside Thailand (for example in Singapore, the United States or the European Union) under appropriate safeguards.

5. Data retention

We keep booking records for as long as needed to provide the service and to meet legal, accounting and tax requirements, then delete or anonymise them. Where a booking is started but not completed, we keep the associated contact details for a limited period so we can help you finish it or follow up, after which they are deleted or anonymised. Visit statistics are deleted after 18 months, and the booking-channel record in your browser after 90 days. We send marketing emails until you unsubscribe, and then keep a note of the unsubscribe so we do not email you again. You can ask us to stop contacting you at any time.

6. Your rights

Under the PDPA you may request access to, correction, or deletion of your data; object to or restrict certain processing; withdraw consent; and request data portability. To withdraw cookie consent, use “Cookie settings” at the bottom of our website; to stop marketing emails, use the unsubscribe link in any of them. You may also lodge a complaint with Thailand's Personal Data Protection Committee. To exercise any right, email sales@sinabeach.com.

7. Cookies

• Essential (always on) - your language, your booking cart and checkout, and your cookie choice, kept in your browser's storage. The site and booking do not work without them.
• Visit statistics (always on, no cookies) - described in section 1.
• Analytics (only if you choose it) - Google Analytics sets cookies (such as _ga) to count visits and show us how the site is used.
• Marketing (only if you choose it) - Google Ads, the Meta Pixel and Google Tag Manager set cookies (such as _gcl_au and _fbp) to measure which ads lead to bookings. Google and Meta may also use them to show you ads.

On your first visit a banner lets you accept all, decline, or choose Analytics and Marketing separately. You can change your choice at any time with Cookie settings at the bottom of our website; turning a choice off removes those cookies from our site.

8. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

9. Children

Entry has minimum-age rules (see our Terms & Conditions). We do not knowingly collect data from children below the age permitted for entry without appropriate parental consent.

10. Changes & contact

We may update this policy and will post the revised version here with a new “last updated” date. Questions? Email sales@sinabeach.com or call 084-329-7701.