Terms & conditions

The party responsible for personal data processed through this website is the legal entity operating The Aurora Retreat Ong Lang.

We collect only what is needed to handle a reservation and to answer a guest’s request.

• Booking details: name, email, phone number, nationality, arrival and departure dates, number of guests, room type and rate plan.
• Special requests and notes a guest writes during booking.
• Minimal payment information: transaction reference, amount, method and status. This website does not store card numbers.
• Transfer receipts a guest chooses to upload when paying by bank transfer.
• A newsletter email address, if the guest subscribes.
• Technical data generated by a visit: IP address, browser type and server logs, kept for operation and security.

• To make and manage reservations, including confirmations, changes and cancellations.
• To take payment and reconcile transactions.
• To contact a guest about a stay they have booked.
• To meet accounting, tax and guest-registration obligations imposed by law.
• To send marketing messages, only where a guest has opted in and can opt out at any time.
• To keep the system secure and to prevent fraud.

We do not sell personal data. It is shared only as far as necessary with parties who help deliver the service.

• The payment gateway, to process the transaction a guest chose.
• The property’s bank, where a guest pays by transfer.
• The providers hosting this system and sending transactional email.
• Government authorities, where the law requires it.

Booking data is kept for as long as it is needed to deliver the stay, resolve any dispute, and satisfy statutory record-keeping. This template states NO specific period on purpose: a retention period is a commitment the property must set and then honour.

• To know what data about you is being processed, and to access it.
• To have inaccurate data corrected.
• To have data deleted, so far as that does not conflict with statutory record-keeping.
• To withdraw a consent you gave, in particular for marketing.
• To ask us to restrict or to object to processing.
• To complain to the competent supervisory authority.

Data travels over an encrypted connection, internal access is limited by role, and actions taken on a reservation are recorded. Card details are never stored by this website.

This website uses browser storage for functions that require it, such as holding an in-progress booking. This template describes no analytics or advertising technology.

When this policy is updated, the new version is published at this address together with its effective date.

Requests about personal data can be sent to the property using the contact details below.