Privacy Policy

Introduction

Celestia is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website or use our property rental services. By using our services, you agree to the collection and use of information in accordance with this policy.

If you have questions about this Privacy Policy, please contact us at privacy@celestovsl.

Information We Collect

Personal Information

When you make a booking inquiry or reservation, we collect:

• Name and contact information (email address, phone number)
• Billing and payment information processed through secure payment providers
• Booking preferences and special requirements
• Communication history related to your reservation

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on each page
• Referring website or search terms used
• Device information and operating system

How We Use Your Information

We use collected information for the following purposes:

• Processing and managing your property reservations
• Communicating with you about bookings and property information
• Responding to inquiries and providing customer support
• Improving our website and services based on usage patterns
• Sending occasional updates about properties if you have opted in
• Complying with legal obligations and preventing fraudulent activities

We process your personal data based on: legitimate business interests in providing our services, your consent where explicitly given, contractual necessity for reservation fulfillment, and legal obligations under Thai law.

Data Sharing and Third Parties

We share your information with third parties only in the following circumstances:

• Payment Processors: Secure payment providers to process your booking payments
• Property Owners: Limited information necessary for property access and stay coordination
• Service Providers: Companies assisting with website hosting, email services, and booking management
• Legal Requirements: When required by law or to protect our legal rights

We do not sell your personal information to third parties. All service providers are bound by confidentiality agreements and use your information only for specified purposes.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our website.

We use the following types of cookies:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand website usage and improve our services
• Preference Cookies: Remember your settings and preferences

You can manage your cookie preferences through our Cookie Policy page or through your browser settings.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data transmission using SSL/TLS protocols
• Secure servers with restricted access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Secure backup procedures for data recovery

While we strive to protect your information, no internet transmission is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

Data Retention

We retain your personal information for the following periods:

• Booking Information: Retained for seven years after your stay for accounting and legal purposes
• Communication Records: Kept for three years to maintain service quality
• Website Analytics: Aggregated data retained indefinitely, individual data for 26 months
• Marketing Consent: Until you withdraw consent or after two years of inactivity

After these periods, information is securely deleted or anonymized unless longer retention is required by law.

Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at privacy@celestovsl. We will respond to your request within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or your local data protection authority.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete such information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside Thailand. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses where necessary.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or via email to registered users. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: