1. Who we are
This website and its program pages (including the Executive Reset, Personal Reset, Team Reset, and Stay pages) are operated by MonPanaNont Wellness Resort & Spa, 9/9 Moo 9 Khilek, Mae Taeng, Chiang Mai 50150, Thailand ("MonPanaNont", "we", "us").
For anything related to your personal data, contact us at hello@monpananont.com or +66 52 080 783.
2. What we collect
- Inquiry and application details. When you submit an inquiry or program application, we collect the details you provide: name, email address, optional phone number, preferred timing, contact preference, and any question you choose to add. Please do not provide medical records, diagnoses, or other sensitive health information through these forms.
- Attribution and journey details. To understand which campaigns lead to genuine enquiries and bookings, the enquiry record may include UTM parameters,
fbclid,gclid, the original landing URL, referring page, submission page, and stable lead and journey identifiers. These identifiers are intended to let us connect a lead with a later opportunity, deposit, and booking without relying only on a name or email match. - Booking details. Room bookings are completed through our secure third-party booking engine (Travelanium). The information you enter there (name, contact details, payment details, stay dates) is processed by that provider under its own privacy policy. We receive the reservation details needed to host your stay. We do not see or store your full payment card details.
- Usage and device data. When Analytics or Advertising is active under our regional settings, the relevant providers collect technical information such as pages visited, approximate location, device and browser type, and how you found us (for example, which advertisement you clicked). Essential form delivery still receives normal network data such as IP address and user agent when you submit.
3. How we use your information
- To respond to your inquiry or application and arrange your program or stay.
- To maintain a reliable record of the enquiry through opportunity, deposit, and booking stages and to measure which campaigns resulted in bookings.
- To operate, improve, and secure this website.
- To measure and improve our advertising, including showing you relevant ads and measuring whether our ads led to inquiries or bookings.
- To send optional program news or nurture emails only when you have separately opted in. You may unsubscribe or withdraw that consent at any time.
- To keep records we are legally required to keep, such as booking and payment records.
Our legal bases are taking steps at your request before a possible contract (answering an enquiry and arranging a booking), legitimate interests (secure administration, record integrity, and proportionate business measurement), legal obligations (booking and financial records), and consent for optional marketing and non-essential analytics or advertising technologies. We do not sell your personal information or make automated eligibility decisions.
4. Service, advertising and analytics providers
This site uses the following third-party providers:
- WhatsApp (WhatsApp Ireland Limited / Meta Platforms). If you choose a WhatsApp link, WhatsApp opens with a draft message and a journey reference. Nothing is sent until you choose to send it in WhatsApp. WhatsApp processes the message and account information under its own terms and privacy policy. See WhatsApp's EEA Privacy Policy.
- Meta Pixel (Meta Platforms, Inc.). Measures Facebook and Instagram advertising. On a successful enquiry, contact details may be normalized and hashed by Meta's browser library for matching. For visitors in Europe, Meta is not loaded unless Advertising consent is granted. See Meta's Privacy Policy.
- Google Analytics 4 and Google Ads (Google LLC). Analytics measures site use and events; Ads measures and attributes advertising. For visitors in Europe, Analytics and Advertising are controlled separately and the relevant Google tag is not requested before permission. See Google's Privacy Policy.
- Microsoft Clarity (Microsoft Corporation). Provides interaction analytics, heatmaps, and session replay to improve the site. Form input is masked by the provider. For visitors in Europe, Clarity is not loaded unless Analytics consent is granted. See Microsoft's Privacy Statement.
- GoHighLevel / LeadConnector (HighLevel Inc.). Receives enquiry form submissions for contact management, workflow automation, messaging, and—when you request one—appointment scheduling. Its web-chat code is loaded only when you explicitly ask to open chat. See HighLevel's Privacy Policy.
- Zoom (Zoom Video Communications, Inc.). May host a private conversation you choose to schedule. Zoom receives the meeting details required to provide that call; it is not used merely because you view or submit the enquiry form. See Zoom's Privacy Statement.
5. Cookies and consent
Outside Europe, analytics and advertising technologies load when the page opens. Visitors in Europe receive separate Analytics and Advertising controls before optional technologies load. Accept all and Reject all are presented with equal prominence there, rejecting optional technologies does not prevent an enquiry, and choices can be changed using the "Privacy settings" button.
Our provider and category details are in the Cookie Policy.
6. Who we share information with
We share personal information only with service providers who help us run the business: Travelanium for bookings; GoHighLevel/LeadConnector for CRM, workflow, chat, messaging, and appointment scheduling; Zoom when you schedule a video conversation; and the advertising and analytics providers named above when they are active under our regional settings. We may also disclose information where required by law.
Some providers process information in the United States or other countries outside Thailand, the UK, or the EEA. Where GDPR or UK GDPR applies, transfers rely on the provider's contractual and legal safeguards, such as approved standard contractual clauses or an applicable adequacy mechanism. Contact us if you want more information about the safeguards relevant to your data.
7. How long we keep information
We normally retain enquiries that do not become bookings for up to 24 months after the last meaningful contact, unless we need a shorter or longer period for a legal claim or you ask us to delete them. Marketing records are kept until you unsubscribe or withdraw consent, subject to a minimal suppression record. Opportunity, deposit, booking, and payment records are kept for the periods required by Thai law and legitimate business recordkeeping. Provider analytics and advertising retention is controlled in the relevant account settings.
8. Your rights
Under Thailand's Personal Data Protection Act (PDPA), and under the GDPR if it applies to you, you have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct or delete it.
- Withdraw consent you have given, including for marketing.
- Object to or restrict certain uses of your information.
- Complain to your data protection authority.
To exercise any of these rights, email hello@monpananont.com. We will respond within the time required by law.
9. Children
This website and our programs are intended for adults. We do not knowingly collect personal information from children.
10. Changes to this policy
If we change this policy, we will post the updated version on this page with a new "Last updated" date.
11. Contact
MonPanaNont Wellness Resort & Spa
9/9 Moo 9 Khilek, Mae Taeng, Chiang Mai 50150, Thailand
hello@monpananont.com · +66 52 080 783