How we collect, use and protect your personal data — aligned with the GDPR and Cambodian law.
Villa Agati is committed to protecting the privacy of every visitor to this website. This Privacy Policy explains what personal data we may collect, how we use it, and the rights you have over your data. We have voluntarily aligned this policy with the standards of the European General Data Protection Regulation (GDPR), in addition to applicable Cambodian law, so that the same protections apply to all our visitors regardless of their location.
The data controller responsible for the personal data processed through this website is:
This website is intentionally minimal: it does not use any tracking or analytics tools, displays no cookie banner, and does not include any contact form, newsletter signup, or commercial cookie. The only personal data we may receive is the data you choose to send us through the channels listed on the contact page (email, WhatsApp, telephone).
When you contact us this way, we may receive:
In addition, our hosting provider (Vercel Inc.) automatically processes standard server logs — such as your IP address, the browser and device you use, and the pages you visit — for the technical operation, security and performance of the website. These logs are not used for analytics or profiling.
We process the personal data you send us only for the following purposes:
Under GDPR principles, the legal bases for these uses are: the performance of a contract or pre-contractual measures (when you ask us to organise your stay), our legitimate interest (responding to your enquiry, securing the site), and our legal obligations (accounting and tax records).
This website does not place any analytics, advertising or third-party tracking cookies on your device. Only strictly necessary technical resources (such as the page you requested and the static assets that make it display correctly) are loaded. Because no consent-requiring cookie is used, no cookie banner is displayed.
Your data is only accessed by the Villa Agati team for the purposes described above. We do not sell, rent or share your personal data with third parties for marketing purposes.
For the technical operation of the website and the management of bookings, we rely on the following service providers (acting as data processors on our behalf):
Because Villa Agati is based in Cambodia and our hosting provider Vercel Inc. is a United States company, your data (including server logs) may be transferred outside the European Economic Area. These transfers are framed by Vercel's Standard Contractual Clauses (SCC) and its certification under the EU-U.S. Data Privacy Framework (DPF), providing safeguards equivalent to those required by GDPR. We do not transfer your data to any country or organisation that does not offer adequate protection.
We keep your personal data only for as long as necessary:
In line with GDPR principles, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@villaagatisiemreap.com. We will respond within one month. If you consider that the processing of your personal data infringes the GDPR, you also have the right to lodge a complaint with the data protection authority of your country of residence.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The date of the latest version is shown below. Please check this page periodically to stay informed.
Last updated: 26 April 2026