Privacy Policy | Villa Agati

Villa Agati is committed to protecting the privacy of every visitor to this website. This Privacy Policy explains what personal data we may collect, how we use it, and the rights you have over your data. We have voluntarily aligned this policy with the standards of the European General Data Protection Regulation (GDPR), in addition to applicable Cambodian law, so that the same protections apply to all our visitors regardless of their location.

1. Data Controller

The data controller responsible for the personal data processed through this website is:

Villa Agati, sole proprietorship under Cambodian law
Wat Svay Village, Sangkat Sala Kamreuk, Krong Siem Reap, Siem Reap Province, Cambodia
Email: info@villaagatisiemreap.com
Phone: +855 77 527 825

2. What Data We Collect

This website is intentionally minimal: it does not use any tracking or analytics tools, displays no cookie banner, and does not include any contact form, newsletter signup, or commercial cookie. The only personal data we may receive is the data you choose to send us through the channels listed on the contact page (email, WhatsApp, telephone).

When you contact us this way, we may receive:

Your name, email address and/or phone number
The content of your message and any other information you choose to share
Booking-related details if you ask us to make a reservation

In addition, our hosting provider (Vercel Inc.) automatically processes standard server logs — such as your IP address, the browser and device you use, and the pages you visit — for the technical operation, security and performance of the website. These logs are not used for analytics or profiling.

3. Why We Use Your Data

We process the personal data you send us only for the following purposes:

To answer your questions and requests
To organise your stay and any related services (transport, activities, dietary preferences)
To meet our legal and accounting obligations under Cambodian law
To ensure the security and proper functioning of the website (server logs only)

Under GDPR principles, the legal bases for these uses are: the performance of a contract or pre-contractual measures (when you ask us to organise your stay), our legitimate interest (responding to your enquiry, securing the site), and our legal obligations (accounting and tax records).

4. Cookies & Tracking

This website does not place any analytics, advertising or third-party tracking cookies on your device. Only strictly necessary technical resources (such as the page you requested and the static assets that make it display correctly) are loaded. Because no consent-requiring cookie is used, no cookie banner is displayed.

5. Who Has Access to Your Data

Your data is only accessed by the Villa Agati team for the purposes described above. We do not sell, rent or share your personal data with third parties for marketing purposes.

For the technical operation of the website and the management of bookings, we rely on the following service providers (acting as data processors on our behalf):

Vercel Inc. — website hosting (United States)
Booking Factory — back-office property-management system used internally to manage bookings; this tool is not connected to or accessible from the public website
Email service providers — used to receive and reply to messages sent to info@villaagatisiemreap.com

6. International Data Transfers

Because Villa Agati is based in Cambodia and our hosting provider Vercel Inc. is a United States company, your data (including server logs) may be transferred outside the European Economic Area. These transfers are framed by Vercel's Standard Contractual Clauses (SCC) and its certification under the EU-U.S. Data Privacy Framework (DPF), providing safeguards equivalent to those required by GDPR. We do not transfer your data to any country or organisation that does not offer adequate protection.

7. How Long We Keep Your Data

We keep your personal data only for as long as necessary:

Enquiries and contact messages: up to 3 years after the last commercial interaction with you
Booking and accounting records: for the period required by Cambodian tax and accounting law (typically up to 10 years)
Server logs: kept by our hosting provider for the duration set in their privacy policy, generally a few weeks to a few months

8. Your Rights

In line with GDPR principles, you have the following rights regarding your personal data:

Right of access — obtain confirmation of the data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data when no longer needed
Right to restrict processing — ask us to limit how we use your data
Right to object — object to processing based on legitimate interest
Right to data portability — receive your data in a structured, machine-readable format
Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at info@villaagatisiemreap.com. We will respond within one month. If you consider that the processing of your personal data infringes the GDPR, you also have the right to lodge a complaint with the data protection authority of your country of residence.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The date of the latest version is shown below. Please check this page periodically to stay informed.

Last updated: 26 April 2026