Last updated: 18 October 2026

Savana Co., Ltd. (« SAVANA », « we », « us ») respects your privacy. This policy explains how we collect, use and protect your personal data when you visit savanasanctuary.com, contact us by phone, LINE or email, or visit our massage salon, in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (« PDPA »).

1. Data controller

Savana Co., Ltd., company registration number 0105569104711, 88 Paso Tower, Unit G-01, G Floor, Silom Road, Suriyawong, Bang Rak, Bangkok 10500, Thailand. Email: contact@savanasanctuary.com.

2. Personal data we collect

• Identity and contact data: name, telephone number, email address, LINE ID, nationality.
• Booking data: treatments chosen, dates and times of visits, therapist preferences, visit history.
• Membership data: membership card level, amount paid, balance and usage.
• Health information you choose to share: such as pregnancy, injuries, allergies or medical conditions relevant to your treatment.
• Payment data: payment method and transaction references when you pay at our salon. We do not store full card numbers.
• Technical data: IP address, browser type, device information and pages visited, collected automatically when you browse our website.

Our website does not include any booking, payment or account form. Personal data is mainly collected when you call us, write to us on LINE or by email, or visit our salon.

3. How and why we use your data

We use your personal data to manage your bookings, provide your treatments, respond to your requests and manage membership cards and payments. These uses are necessary for the performance of our contract with you.

We use the health information you share solely to adapt your treatment and ensure your safety. As this is sensitive personal data, we collect and use it only with your explicit consent.

We also process certain data to comply with our accounting, tax and other legal obligations. On the basis of our legitimate interest, we use data to ensure the security of our premises, staff and clients, and to improve our website and services.

Finally, we send you promotions and news only with your consent, which you may withdraw at any time.

4. Sharing your data

We do not sell your personal data. We may share it only with:

• service providers who help us operate, such as our website host (Hostinger), our email provider (Google Workspace), LINE, payment providers and our accountant;
• booking platforms you choose to use to book with us, such as Klook or Gowabi;
• public authorities when required by law.

These parties may use your data only for the purposes described in this policy.

5. International transfers

Some of our service providers, such as Hostinger, Google or LINE, may store data on servers outside Thailand. When this happens, we rely on providers that apply appropriate data protection safeguards, as required by the PDPA.

6. How long we keep your data

• Client and booking data: up to 3 years after your last visit.
• Membership data: for the validity of the card, plus 1 year.
• Accounting and tax records: as long as required by Thai law (generally 5 years).
• Marketing data: until you withdraw your consent.

7. Your rights

Under the PDPA, you have the right to:

• access your personal data and obtain a copy;
• request correction of inaccurate data;
• request deletion or anonymization of your data;
• object to or restrict certain uses of your data;
• receive your data in a commonly used format (data portability);
• withdraw your consent at any time, without affecting prior processing;
• file a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise these rights, contact us at contact@savanasanctuary.com. We will respond within 30 days.

8. Cookies

Our website uses only the cookies necessary for it to function and to remain secure. If we later use cookies to measure traffic or for advertising, we will ask for your consent first through a cookie banner. You can delete or block cookies at any time in your browser settings.

9. Security

We take reasonable technical and organizational measures to protect your personal data against loss, misuse or unauthorized access.

10. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with its date of last update.

11. Contact

For any question about this policy or your personal data: contact@savanasanctuary.com.