Privacy Policy

1. Who we are

This website (curryphuket.com) is operated byLittle Prince Indian Cuisine, a restaurant business operating in Phuket, Thailand.

We are the data controller for personal data collected through this site. For enquiries about this policy or your data, contact us at the address above.

2. Applicable data protection laws

We serve customers internationally. Depending on where you are located, your personal data may be protected by one or more of the following laws, all of which we respect:

• EU General Data Protection Regulation (GDPR) — European Union
• UK GDPR — United Kingdom
• Personal Data Protection Act B.E. 2562 (PDPA) — Thailand
• Personal Data Protection Act 2012 (PDPA) — Singapore
• Personal Data Protection Act 2010 (PDPA) — Malaysia
• Data Privacy Act 2012 (Republic Act 10173) — Philippines
• Personal Data Protection Law 2022 — Indonesia
• Privacy Act 1988 (as amended) — Australia
• Privacy Act 2020 — New Zealand
• Personal Information Protection and Electronic Documents Act (PIPEDA) — Canada
• California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) — California, USA

Where your local law grants you rights beyond those described in this policy, we will honour those rights. To make any request, contact us at info@curryphuket.com.

3. What data we collect and why

We collect personal data only when you actively provide it or when it is generated by your use of this site.

Contact and enquiry data

When you contact us by email or phone, we collect your name, email address, phone number, and the content of your message. We use this to respond to your enquiry. The legal basis is legitimate interests (Article 6(1)(f) GDPR) and, where a booking or contract results, performance of a contract (Article 6(1)(b) GDPR).

Analytics data

With your consent, we use Google Analytics 4 to collect anonymised data about how visitors use this site — pages viewed, referral source, and device type. This data does not identify you personally. The legal basis is consent (Article 6(1)(a) GDPR). You can withdraw consent at any time by clicking "Reject" in the cookie banner, or by clearing your browser's local storage for this site.

Google Analytics data is processed by Google LLC under their own privacy policy and data processing terms. Data may be transferred to servers outside the EEA under Standard Contractual Clauses.

Analytics consent preference

Your consent choice ("Accept" or "Reject") is stored in your browser's local storage under the key analytics-consent. This is not a cookie — it stays in your browser and is never sent to our servers.

Site performance data

We collect anonymised Core Web Vitals data (page load performance metrics such as LCP, CLS, and FCP) via our own analytics endpoint. This data contains no personally identifiable information and is used solely to monitor and improve site performance.

4. How long we keep your data

Enquiry and correspondence data is retained for up to 3 years from last contact, or longer where required by Thai law or ongoing contractual relationships. Anonymised analytics data may be retained indefinitely.

5. Who we share your data with

We do not sell or rent your personal data. We may share it with:

• Google LLC — analytics processing, only if you have given consent.
• Hosting and infrastructure providers — who process data on our behalf under data processing agreements (our site is hosted on Netlify).
• Professional advisers — lawyers or accountants where necessary.
• Authorities — where required by Thai law or a court order.

6. International transfers

Our website is hosted on servers that may be located outside Thailand and the European Economic Area (EEA). Where personal data is transferred internationally, we take steps to ensure an adequate level of protection is in place, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data where we have no lawful reason to retain it.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any right, contact us at info@curryphuket.com. We will respond within 30 days (or within the timeframe required by your local law, whichever is shorter).

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority — for example, your national data protection regulator in the EU, the ICO in the UK, the OAIC in Australia, the Privacy Commissioner in New Zealand or Canada, or the PDPC in Singapore or Thailand.

8. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our site is served exclusively over HTTPS. No internet transmission is completely secure; we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of this site after a change constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or to exercise your rights, please contact us at:
info@curryphuket.com