Privacy Policy

Last updated: October 2026

Art Samui respects the privacy of everyone who visits this website, writes to us or visits the gallery. This policy explains what personal data we collect, why we collect it, how long we keep it and what rights you have. It is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (the "PDPA") and, where it applies to you, the EU General Data Protection Regulation (the "GDPR").

1. Who we are

The website artsamui.com is operated by Art Samui, in Koh Samui, Thailand.

For the purposes of the PDPA, we are the data controller of the personal data described in this policy. You can reach us at any time at contact@artsamui.com.

2. The personal data we collect

• When you use the contact form: your name, your email address, the context of your enquiry if you choose to indicate it (for example hotel, spa, residence, development, gallery visit or press), and the content of your message.
• When you write to us or call us, by email, telephone, WhatsApp or LINE: your contact details and the content of our exchanges.
• When you arrange a gallery visit: your name, your contact details and the date of your visit.
• When we work together on a project: the professional contact details of the people involved, and the information needed to prepare and carry out the project.

Data you give us
- When you use the contact form: your name, your email address, the context of your enquiry if you choose to indicate it (for example hotel, spa, residence, development, gallery visit or press), and the content of your message.
- When you write to us or call us, by email, telephone, WhatsApp or LINE: your contact details and the content of our exchanges.
- When you arrange a gallery visit: your name, your contact details and the date of your visit.
- When we work together on a project: the professional contact details of the people involved, and the information needed to prepare and carry out the project.

Please do not send us sensitive personal data, such as information about health, religion or political opinions. We do not need it.

Data collected automatically
When you visit the website, our hosting provider automatically records technical information in server logs: your IP address, the type of browser and device you use, the pages requested and the date and time of the request. These logs are used only to keep the website secure and working.

The website does not use advertising cookies, analytics tools or tracking technologies (see section 9).

3. Why we use your data, and on what basis

We do not send newsletters or marketing messages. If this changes, we will only send them to people who have given their consent, and every message will allow you to unsubscribe.

We never sell your personal data, and we never use it for automated decision-making or profiling.

4. Who we share your data with

We share your personal data only when necessary, and only with:

• our service providers, who act on our instructions: website hosting, contact form processing and email;
• our professional advisers, such as accountants or lawyers, under a duty of confidentiality;
• public authorities, when the law requires it.

When you contact us through WhatsApp, LINE or LinkedIn, those platforms also process your data under their own privacy policies.

5. International transfers

Some of our service providers may store or process data outside Thailand. When this happens, we make sure the transfer complies with the PDPA, in particular by using providers that offer appropriate safeguards for the protection of personal data.

6. How long we keep your data

• Enquiries that do not lead to a project: up to 24 months after our last exchange, so that we can follow up on the conversation if you wish. You can ask us to delete them earlier.
• Clients and projects: for the duration of our relationship, then for as long as the law requires us to keep business and accounting records.
• Server logs: for the short period set by our hosting provider, generally a few weeks.

When data is no longer needed, we delete it or make it anonymous.

7. Your rights

Under the PDPA, and under the GDPR where it applies to you, you have the right to:

• be informed about how your data is used, as described in this policy;
• access your personal data and obtain a copy of it;
• receive your data in a commonly used format, or ask us to transfer it to another organisation;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data, or to make it anonymous;
• ask us to restrict the use of your data;
• object to the use of your data;
• withdraw your consent at any time, where we rely on it, without affecting what was done before.

To exercise any of these rights, write to contact@artsamui.com. We may ask you to confirm your identity before acting on your request. We will reply within 30 days.

If you believe your data has not been handled properly, you may lodge a complaint with the Office of the Personal Data Protection Committee in Thailand. If you live in the European Union, you may also contact the data protection authority of your country. We would, however, appreciate the chance to address your concern first.

8. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. The website is served over an encrypted connection (HTTPS), and access to messages and client records is limited to the people who need them. No transmission over the internet can be guaranteed to be completely secure, but we work to keep the risk as low as possible.

9. Cookies

This website does not use advertising cookies, analytics cookies or any other tracking technology, and it does not load fonts, maps or videos from third-party services. For this reason, no cookie banner is displayed.

If we add such tools in the future, we will update this policy and ask for your consent beforehand where the law requires it.

10. Links to other websites

This website contains links to other websites, such as LinkedIn. We are not responsible for their privacy practices, and we invite you to read their own policies.

11. Minors

This website and our services are intended for adults and professionals. We do not knowingly collect personal data from minors. If you believe a minor has sent us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes to the website, to our services or to the law. The date at the top of this page shows when it was last updated. Significant changes will be indicated on this page.

13. Contact

For any question about this policy or about your personal data:

Art Samui
Koh Samui, Thailand
contact@artsamui.com