Privacy Policy
Last Updated: February 10, 2026
1. Introduction
Chang Haven ("we", "our", "us") is committed to protecting the privacy of our guests, prospective guests, and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with our website or services.
This policy applies to all information collected through our website at https://changhav.sbs, as well as information provided during the inquiry, booking, and residency process. If you have questions about this policy, please contact us at [email protected].
2. Information We Collect
We collect the following types of personal information:
Information you provide directly: When you fill out our contact form, book a retreat, or communicate with us, we may collect your name, email address, phone number, mailing address, and any additional details you include in your message.
Residency-related information: For guests who book a program, we may collect dietary requirements, emergency contact details, passport or identification information (as required by Thai law for accommodation providers), and any preferences you share to help us personalize your stay.
Information collected automatically: When you visit our website, we may collect your IP address, browser type, device information, pages visited, and time spent on the site through cookies and similar technologies. See our Cookie Policy for more details.
3. How We Use Your Information
We use personal information for the following purposes:
Service delivery: To process inquiries, manage bookings, prepare for your arrival, and provide the services included in your chosen program.
Communication: To respond to your questions, send booking confirmations, provide updates about your stay, and share relevant information about our programs when you have opted in to receive such communications.
Legal obligations: To comply with Thai regulations regarding guest registration and accommodation reporting, and to meet any applicable tax or legal requirements.
Website improvement: To understand how visitors use our website and to improve its content, functionality, and user experience through analytics.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent: When you submit a contact form, subscribe to communications, or accept cookies, you provide consent for us to process the relevant data.
Contractual necessity: When you book a program, we process your data as necessary to fulfill our agreement with you.
Legal obligation: Thai law requires accommodation providers to collect and report certain guest information to local authorities.
Legitimate interest: We may process data for purposes such as improving our services, provided this does not override your rights and freedoms.
5. Data Sharing
We do not sell your personal information to third parties. We may share limited information in the following circumstances:
Service providers: We may share information with trusted providers who assist with payment processing, website hosting, or analytics — only to the extent necessary for them to perform their services.
Legal requirements: We may disclose information when required by Thai law or in response to valid legal processes, such as guest registration with local authorities.
Emergency situations: In the event of a medical or safety emergency, we may share relevant information with emergency services or designated emergency contacts.
6. Data Protection Measures
We take reasonable steps to protect personal information from unauthorized access, alteration, or disclosure. These measures include secure data storage, limited staff access to personal records, encrypted transmission of sensitive information through our website, and regular review of our data handling practices.
In the unlikely event of a data breach that could affect your rights, we will notify you and the relevant authorities as required by applicable law.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy. Specifically:
Inquiry data (from contact forms) is retained for up to 12 months after the last communication. Guest records are retained for the duration of your residency plus 3 years, as required for Thai regulatory and tax compliance. Website analytics data is retained in aggregated form and does not personally identify individuals after 26 months.
8. Cookies
Our website uses cookies and similar technologies to improve your browsing experience. You can manage your cookie preferences through our Cookie Policy page or through your browser settings. Essential cookies are necessary for the website to function and cannot be disabled.
9. Your Rights
Under Thailand's Personal Data Protection Act (PDPA) and applicable international standards, you have the following rights regarding your personal data:
Access: You may request a copy of the personal data we hold about you.
Correction: You may request that we correct any inaccurate or incomplete data.
Deletion: You may request that we delete your personal data, subject to legal retention requirements.
Portability: You may request that your data be provided to you in a commonly used format.
Objection: You may object to the processing of your data based on legitimate interest.
Withdrawal of consent: You may withdraw your consent to data processing at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected].
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies before providing any personal information.
11. Children's Privacy
Our services are designed for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Chang Haven
112 Moo 3, Mae Rim-Samoeng Road
Mae Rim, Chiang Mai 50180, Thailand
Email: [email protected]
Phone: +66 53 862 749
For complaints regarding data handling, you may also contact the Office of the Personal Data Protection Committee (PDPC) of Thailand.