Privacy Policy

OWNLY Capsule Hotel ("we", "us"), 3rd Fl, 416-418 Charoen Krung Rd, Samphanthawong, Bangkok 10100, Thailand. We are the data controller for the personal data described here, under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). Contact: ownlycapsulehotel@gmail.com · +66 61 527 7971.

• Account and booking details: your name, email address, password (stored only in encrypted form) or your Google sign-in, ID or passport number, stay dates, number of capsules, notes you add, and promo codes.
• Extend-stay details: if you use the extend-stay offer, the platform you first booked on, the name on that booking, its dates and the amount you paid, so we can check it.
• ID/passport photo: the photo you upload before check-in for guest registration.
• Payment details: your payment method and, for PromptPay, Alipay or WeChat Pay, the payment slip you upload. Card payments are handled by Stripe; we never see or store your full card number.
• Consent records: when you accepted this policy and the non-refundable terms, and the IP address used.
• Messages: what you send us by LINE, WhatsApp, WeChat, phone or email.
• Bookings made elsewhere: if you book through Agoda, Booking.com, Airbnb, Trip.com or Expedia, we receive your name and booking details from that platform.
• Cookies: only the ones the site needs. One keeps you signed in (up to 30 days) and one remembers your language. We do not use advertising or tracking cookies.

• To take, confirm and manage your booking, and send you your confirmation and door code (to perform our contract with you).
• To register guests and check identity as required by Thai law (legal obligation).
• To check payments, prevent fraud and keep accounting and tax records (legal obligation and legitimate interest).
• To answer your questions and look after you during your stay (contract and legitimate interest).
• Where we rely on your consent (for example, your ID photo), you can withdraw it at any time; this does not affect what we did before.

We do not sell your personal data. We share it only with services that help us run the hotel, and only what they need:

• Stripe: card payments
• Brevo: sending booking emails and verification codes
• Google: Google sign-in, and Google Cloud Vision to read payment slips automatically
• LINE: notifying our staff about bookings and payments
• Vercel (website hosting and file storage) and Neon (database)
• The booking platform you booked through, where relevant
• Authorities, when Thai law requires it

Some of these companies store data outside Thailand (for example in Singapore or the United States). When that happens we rely on their data-protection commitments, as the PDPA allows.

• Booking and payment records: as long as Thai accounting and tax law requires (generally at least 5 years).
• ID/passport photos: only as long as needed for guest registration and legal requirements.
• Your account: until you delete it. When you delete your account, we remove your name, email, password and Google link; booking records we must keep for accounting stay, without those personal details.

Under the PDPA you can ask to access or get a copy of your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent. You can delete your account yourself on your Account page, or email us for anything else. We reply within 30 days. You may also complain to Thailand's Office of the Personal Data Protection Committee (PDPC).

We use encrypted connections (HTTPS), store passwords only in encrypted form, keep payment slips and ID photos in private storage, and limit access to staff who need it.

Our social-media tool uses YouTube API Services to publish our own videos to our YouTube channel. It does not collect information about you. When you watch our videos on YouTube, YouTube's Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy) apply.

We may update this policy; the date at the top shows the latest version.