LEGAL NOTICE

Legal Notice & Data Protection (Thailand)

Last updated AUGUST 2025 

1. Legal Notice

Owner & Operator

This website is operated by Legacy Suites Co., Ltd., overseeing operations on Hotels listed as above

Registered Address (Thailand HQ):

12 Soi Sukhumvit 29 Khwaeng Khlong Toey, Nua, Watthana, Bangkok 10110 Thailand

Email: legacysuitesbkk@gmail.com

Intellectual Property

All content on this website (text, images, logos, design, downloads) is the property of Legacy Hotels Group or its affiliates and may not be copied, distributed, or reused without prior written consent. Accor and brand names (Novotel, Mercure, etc.) are trademarks of Accor SA and used under license.

Liability

Information on this website is provided for general purposes only. While we strive to ensure accuracy, Legacy Hotels Group accepts no responsibility for errors, omissions, or temporary unavailability. External links are provided for convenience; we are not responsible for their content.

Governing Law

This website and its use are governed by the laws of the Kingdom of Thailand.

2. Data Protection Notice (Thailand PDPA)

Legacy Hotels Group is committed to protecting your personal data. This notice explains how we collect, use, disclose, and safeguard information in compliance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand.

2.1 Categories of Personal Data We Collect

General contact data: Name, email, phone, company, nationality.

Booking data: Stay details, preferences, payment reference.

Job applications: CV, work history, education, references.

CSR/partnership enquiries: Contact details, proposal content.

Website data: Cookies, analytics, device/browser info.

2.2 Purposes of Processing

To respond to enquiries and provide requested services.

To manage hotel bookings, stays, and related services.

To process job applications and recruitment.

To manage CSR projects and community partnerships.

To comply with legal obligations and protect our rights.

Marketing & communications (with consent): newsletters, special offers, service updates, and satisfaction surveys.

2.3 Legal Bases (Thailand PDPA)

Contractual necessity: where processing is needed to fulfill bookings, applications, or service requests.

Legitimate interests: operational analytics, fraud prevention, service improvements.

Legal obligations: retention for tax, accounting, labor law.

Consent: required for marketing communications and certain optional data.

2.4 Marketing Consent (Thailand Law)

If you enter the contact form directly via the “Contact Us” navigation link on this website, consent to receive marketing communications is considered pre-selected/auto-checked under Section 19 of the PDPA, as this is deemed related to the service context.

You may withdraw at any time by unchecking the box before submitting, or later via the unsubscribe link in each email.

If you access the contact form by any other path (e.g. CSR form, career form), marketing consent is not pre-selected and requires explicit opt-in.

2.5 Sharing & Transfers

We may share data with:

Hotel affiliates and properties within Legacy Hotels Group.

Licensed brand operators (Accor SA and affiliates).

Service providers (IT hosting, booking engine, HR systems, email platforms).

Regulators or authorities where required by law.

Some transfers may be international; safeguards such as contractual clauses or recognized standards will apply.

2.6 Data Retention

We retain personal data only as long as needed for the purposes above or as required by law:

Contact enquiries: up to 5 years.

Job applications: up to 2 years after process completion (unless hired).

Booking records: 10 years for accounting/legal.

Marketing consent: until withdrawal.

2.7 Data Subject Rights (Thailand PDPA)

You have the right to:

Access and obtain a copy of your personal data.

Request correction of inaccurate or incomplete data.

Request deletion, restriction, or objection to processing.

Withdraw consent at any time (without affecting prior lawful processing).

File a complaint with the Personal Data Protection Committee (PDPC).

2.8 Cookies & Tracking

Our website uses cookies and similar technologies to improve functionality and measure usage. You can manage cookie settings in your browser or via our cookie banner.

2.9 Security Measures

We implement organizational, technical, and physical safeguards to protect data against loss, misuse, or unauthorized access.

2.10 Contact for Privacy Matters

For any privacy inquiries, requests, or complaints, please contact Legacy Suites Co.Ltd.