Privacy Policy

1. Data Controller

Vero Italian Co., Ltd. (Registration No. 0845568007830)
122/73 Moo 3, Had Lamai Road, Ko Samui District, Surat Thani 84310, Thailand
Contact: hello@briobeachsamui.com

This policy applies to the website briobeachsamui.com and any personal data collected through it.

2. Data We Collect

Waitlist form — when you join our reservation waitlist, we collect:

• First name
• Email address
• Date and time of submission

Analytics data Google Analytics 4 — we use Google Analytics 4 to understand how visitors use our website. This collects anonymised data including:

• Pages visited and time spent
• Approximate geographic region (country/city level)
• Device type and browser
• Referral source (how you found us)

Google Analytics 4 does not collect your name or email address. IP addresses are anonymised before being stored. You can opt out via Google's opt-out tool.

No cookies banner — we do not use advertising cookies, retargeting, or third-party tracking beyond Google Analytics 4.

3. How We Use Your Data

• To confirm your waitlist spot and send you updates about Brio Beach Club's opening
• To contact you before opening night to arrange your reservation
• To improve our website based on anonymised analytics

We do not use your data for advertising, profiling, or automated decision-making. We do not sell or share your personal data with third parties, except as described below.

4. Legal Basis

We process your data under the following legal bases in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent — for waitlist registration (you explicitly submit the form)
• Legitimate interest — for anonymised analytics to improve our website

5. Data Retention

Waitlist data is retained until your reservation is confirmed or you request deletion, and no longer than 12 months after Brio Beach Club's opening. Analytics data is retained for 14 months as per Google Analytics 4 default settings.

6. Third-Party Services

• Google Analytics 4 (Google LLC) — anonymised website analytics. Google Privacy Policy
• Hostinger (Hostinger International Ltd.) — website hosting. Your data is stored on servers managed by Hostinger.

These providers are bound by their own privacy policies and applicable data protection regulations.

7. Your Rights

Under Thailand's PDPA and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your data
• Withdrawal of consent — withdraw your consent at any time without affecting prior processing
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at hello@briobeachsamui.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this policy periodically.