Last updated 3 October 2026
This page explains what information Mr. Brown Khaoyai collects about guests and people who contact us, why we hold it, who else sees it, and how you can have it removed. It is written to meet Thailand's Personal Data Protection Act (PDPA).
Mr. Brown Khaoyai is a private villa in Nakhon Ratchasima, Thailand, taking direct bookings by phone, by LINE and on this website, and through online travel agents. We are the data controller for the information described below.
Conversations on LINE and Facebook Messenger are stored by those platforms under their own privacy policies. When a Messenger conversation begins by tapping one of our advertisements, we record an anonymous platform identifier and which advertisement it came from, so we can tell which of our ads bring real guests. That identifier cannot be used to contact you anywhere else and is not linked to your name unless you go on to make a booking.
This site loads the Meta Pixel, which tells Meta that a browser visited a page and whether it tapped our LINE link or phone number. It sets cookies. We use it only to show advertisements to people who have looked at the villa. There is no account to create.
When you book on this website, the booking form sends your name, phone number, email address and stay details to our booking records so we can hold the nights and confirm your stay. You pay on Stripe's secure page: your card or PromptPay details go to Stripe and are never seen or stored by us. Stripe tells us only that the payment succeeded, its amount and a payment reference, and emails you a receipt.
The site also uses Vercel Web Analytics to count visits: which pages are viewed, which site or advertisement a visit came from, the type of device and country, and which contact buttons are tapped. It sets no cookies and does not identify you; visits are counted in aggregate.
We also use Microsoft Clarity to understand how the site is used: it records how visitors scroll, tap and move around a page, and lets us replay those visits to find parts that are confusing or broken. Clarity hides what you type into forms, and we do not use it to identify you. It sets cookies. Microsoft processes this data under its own privacy statement.
We use Google Analytics to see how visitors find the site (for example from a search engine, ChatGPT or an advertisement), which pages they view and whether they go on to contact us or book. It sets cookies and does not tell us who you are. Google processes this data under its own privacy policy.
When you arrive from one of our advertisements in ChatGPT, the OpenAI ads pixel tells OpenAI that the visit happened and which pages you viewed, so we can see which of our ChatGPT ads bring visitors. It may set cookies. OpenAI processes this data under its own privacy policy.
Guest reviews shown on this site come from Google and are already public there.
| Information | Purpose |
|---|---|
| Name, phone, email, stay details | To arrange and honour your booking, and to reach you about it |
| Payment records | To confirm payment, return deposits, and keep the accounts required by Thai law |
| Messages | To answer your questions and keep a record of what was agreed |
| Advertising identifiers | To measure which advertisements work, so we spend less on the ones that don't |
We do not sell your information, and we do not share it for anyone else's marketing.
Booking and payment records are kept for five years after your stay, which is the retention period Thai tax law expects of business accounts. Messages and advertising identifiers are kept for two years. After that they are deleted.
Under the PDPA you may ask us to:
Ask us and we will act within 30 days. There is no charge.
To have your data removed, message us on LINE at @mrbrownkhaoyai or call +66 89 466 2362, and say you want your data deleted.
We will remove your booking record, your messages and any advertising identifier connected to you. Where financial records must be kept for the five-year period above, we will keep only the minimum the law requires and delete the rest.
If you contacted us through Facebook or Messenger, this same request removes the identifier stored on our side. Meta holds its own copy of your conversation under its policy, which you can manage in your Facebook account settings.
The Meta Pixel, Microsoft Clarity, Google Analytics and the OpenAI ads pixel described above set cookies in your browser. You can block them in your browser settings, or through your device's advertising controls, without affecting anything else on this site. We use no other cookies. Vercel Web Analytics, described above, works without cookies.
We do not knowingly collect information about children. Where a booking mentions children, we record only how many are staying, so we can prepare the villa.
Questions about this policy, or about the information we hold:
If this policy changes we will update the date at the top of this page.