PRIVACY POLICY

ARKbar Beach Club & Resort values the privacy of our guests, website visitors, and event attendees. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our venue, book with us, attend an event, or interact with our website and social media channels.

This policy is issued in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019), referred to throughout as the PDPA.

Last Updated: 22 April 2026


1. Who We Are

ARKbar Beach Club & Resort (“ARKbar”, “we”, “us”, “our”) is the data controller responsible for the personal data described in this policy.

  • Address: Chaweng Beach, Koh Samui, Surat Thani, Thailand
  • Website: https://www.ark-bar.com
  • Email: arkbarmarketing@gmail.com
  • Telephone: +66 77 413 333

2. Personal Data We Collect

We collect the following categories of personal data:

Booking and reservation data

  • Name, email address, telephone number
  • Country of residence
  • Number of guests, date and time of visit
  • Special requests or dietary requirements
  • Payment details, processed by third-party payment providers and not stored by us

Accommodation data

  • Passport or national ID number, as required by Thai law for hotel guests
  • Nationality and date of birth
  • Check-in and check-out dates
  • Room preferences

Marketing data

  • Email address and name
  • Marketing preferences and opt-in status
  • Email engagement history, including opens and clicks

Website and digital data

  • IP address, browser type, operating system
  • Pages visited, time on site, referral source
  • Cookie identifiers
  • Meta Pixel and Google Analytics identifiers

CCTV footage

  • Visual recordings captured on camera systems throughout the venue

Photography and video content

  • Still images and video recordings taken during events and general operations

3. How We Collect Your Data

We collect personal data through the following channels:

  • Directly from you when you make a booking, submit an enquiry, attend an event, or subscribe to our mailing list
  • Automatically through our website via cookies, analytics, and advertising pixels
  • From third-party booking platforms, online travel agents, and partner venues
  • Through our CCTV system and photography during your visit

4. Legal Basis for Processing

Under PDPA Section 19, we process personal data on one or more of the following legal bases:

  • Contract: to fulfil your booking, reservation, or stay with us
  • Consent: for marketing communications, use of your image in promotional content, and non-essential cookies
  • Legitimate interest: for security, service improvement, and analytics
  • Legal obligation: for accommodation records required by Thai immigration and tourism authorities
  • Vital interest: in emergencies affecting the safety of guests or staff

5. How We Use Your Personal Data

We use personal data for the following purposes:

Operational purposes

  • Managing bookings and reservations
  • Event registration, ticketing, and guest lists
  • Hotel check-in and accommodation administration
  • Customer service and responding to enquiries

Security and safety

  • CCTV monitoring across the venue
  • Incident investigation
  • Loss prevention

Marketing and promotions, with your consent

  • Email newsletters covering events, offers, and venue news
  • Targeted advertising on social media platforms
  • Remarketing through Meta and Google advertising networks

Content and media

  • Photography and video recording during events
  • Use of selected images on our website, social media, and advertising
  • Reposting of user-generated content with permission

Improvement and analytics

  • Website performance measurement
  • Guest experience analysis
  • Event and operations planning

6. Photography, Video, and Media Use

ARKbar is a beach club and events venue where photography and video recording take place regularly, including during parties, DJ nights, fire shows, and daytime operations.

What we capture

  • Wide crowd and atmosphere footage
  • Event performance and stage coverage
  • Food, drink, and venue photography
  • Candid guest moments during events

How we use this content

  • Posts on our official Instagram, Facebook, and TikTok accounts
  • Our website and booking platforms
  • Paid advertising campaigns on Meta and Google
  • Printed and digital marketing collateral

Your rights in relation to photography and video

  • You may request not to be photographed or filmed by notifying any member of our team on arrival
  • You may request removal of specific images or videos featuring you by emailing arkbarmarketing@gmail.com
  • We will take reasonable steps to honour removal requests within 30 days of receipt

Featured or identifiable individuals

Where a guest is the clear and identifiable subject of a photograph or video used in paid advertising or a featured post, we will seek specific consent in writing or through a direct message exchange before publication.


7. CCTV Monitoring

Closed-circuit television (CCTV) cameras operate throughout ARKbar Beach Club & Resort for the following purposes:

  • Guest and staff safety
  • Crime prevention and detection
  • Incident investigation
  • Property protection

Retention: CCTV footage is retained for 30 days and then automatically overwritten, except where required for ongoing incident investigation or legal proceedings.

Access: Only authorised ARKbar management and, where legally required, law enforcement or licensed insurers may access CCTV footage.


8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by Thai law.

Data Category Retention Period
Booking and reservation records 3 years from date of visit
Accommodation records (passport, check-in) 5 years (Thai legal requirement)
Marketing email list Until consent is withdrawn
Website analytics 26 months
CCTV footage 30 days
Photography and video archives Retained as part of our brand archive, subject to your right to request removal
Customer service correspondence 2 years

9. Sharing Your Data

We do not sell your personal data. We share data only in the following circumstances:

Service providers who process data on our behalf

  • Payment processors and bank merchant services
  • Booking platforms including ReserveYourVenue and SwiftBook
  • Email marketing platforms
  • Website hosting and analytics providers including GoDaddy and Google Analytics
  • Social media and advertising platforms including Meta, TikTok, and Google Ads
  • CRM and automation tools used for customer service and operations

Legal or regulatory disclosure

Where required by Thai law, court order, or to protect the legal rights of ARKbar or others.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may transfer to the new owner under the same protections outlined in this policy.


10. International Data Transfers

Some of our service providers are based outside of Thailand, including in the United States, European Union, Singapore, and the United Kingdom. Where your personal data is transferred outside of Thailand, we rely on the following safeguards under PDPA Sections 28 and 29:

  • Transfer to countries with data protection standards recognised as adequate by Thai authorities
  • Standard contractual clauses with providers in non-adequate countries
  • Certification and compliance frameworks operated by major platforms including Meta, Google, and email marketing providers

11. Your Rights Under the PDPA

You have the following rights in relation to your personal data:

  • Right to be informed: understand what data we hold and why
  • Right of access: request a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data, subject to legal retention requirements
  • Right to restriction: request that we limit how we use your data
  • Right to data portability: receive your data in a transferable format
  • Right to object: object to processing based on legitimate interest, including direct marketing
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
  • Right to complain: lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, email arkbarmarketing@gmail.com. We will respond within 30 days of receiving a verified request. We may ask you to confirm your identity before releasing or acting on personal data.


12. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience, measure traffic, and deliver relevant advertising.

Cookie categories

  • Strictly necessary: required for the website to function, no consent required
  • Analytics: Google Analytics, to understand how visitors use our site
  • Marketing: Meta Pixel and Google Ads tags for advertising and remarketing
  • Preferences: remember your language and display settings

You can manage cookie preferences through your browser settings or through the cookie consent banner shown on first visit to our website.


13. Children’s Data

ARKbar Beach Club welcomes guests of all ages until 9pm, after which the venue operates as an adults-only environment. We do not knowingly collect personal data directly from children under 16 for marketing purposes. Parents and guardians are responsible for any bookings made on behalf of minors.

If you believe a child’s data has been collected without appropriate consent, please contact us at arkbarmarketing@gmail.com and we will delete the data promptly.


14. Data Security

We use reasonable technical and organisational measures to protect your personal data, including:

  • Encrypted connections (HTTPS) across our website and booking platforms
  • Access controls that limit staff access to data on a need-to-know basis
  • Regular backups and secure storage
  • Payment data processed exclusively through PCI-compliant third parties

No online system is entirely secure. In the event of a data breach that affects your rights, we will notify the Personal Data Protection Committee and affected individuals within the timeframes required by law.


15. Links to Other Websites

Our website may link to third-party websites, including artist profiles, partner venues, and social media platforms. We are not responsible for the privacy practices of external sites. Please review their privacy policies before submitting personal data.


16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The current version is always available at https://www.ark-bar.com/privacy-policy/, with the last updated date shown at the top.

Material changes that affect how your data is used will be communicated through our website, email, or on-venue signage.


17. Contact and Data Protection Enquiries

For any questions, requests, or concerns relating to this Privacy Policy or your personal data:

ARKbar Beach Club & Resort

  • Email: arkbarmarketing@gmail.com
  • Telephone: +66 77 413 333
  • Address: Chaweng Beach, Koh Samui, Surat Thani, Thailand
  • Website: https://www.ark-bar.com

18. Complaints

If you are not satisfied with our response to a data protection enquiry, or you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand:

Personal Data Protection Committee (PDPC)


19. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Thailand, in particular the Personal Data Protection Act B.E. 2562 (2019). Any disputes arising from this policy are subject to the exclusive jurisdiction of the courts of Koh Samui, Surat Thani, Thailand.

Pop-up-and-save-mailing-list

DINE WITH US

Please fill in all your details to confirm your booking at our Street-side restaurant (HIP- Restaurant) 

Please note* this form is not for the beach club. If you’d like to make a booking for the beach club please click the link below:

BEACH CLUB BOOKING