Privacy Policy

Staging version — updated 9 November 2026. This notice describes the functions currently configured on this staging website. Business details still awaiting confirmation are listed below. It is not yet a complete notice for production.

Who this website is about

This website presents The Windmill Club and Windmill 2, trading as Windmill Pattaya, on Soi Diamond in Pattaya, Thailand.

• The Windmill Club: 29/79 Soi Diamond, Pattaya, Thailand.
• Windmill 2: Soi Diamond, Pattaya, Thailand, directly opposite The Windmill Club.

These are venue details. The legal name and registered address of the organisation responsible for personal data have not yet been confirmed. No company registration number or dedicated privacy email address has been verified.

Information you send us

The contact form asks for your name, email address, preferred club and subject, with an optional message. These details are used to answer your enquiry. An enquiry does not confirm a reservation. Please do not include passport details, payment card information or other sensitive information in your message.

You can use the contact form for a privacy question, marking the subject “Privacy request”. This is the website’s existing enquiry channel; a dedicated privacy contact and the internal handling procedure remain to be confirmed.

Website use, consent and analytics

The website uses Complianz and WP Consent API to record cookie choices. Google Site Kit connects Google Analytics and passes consent signals to Google. Analytics can involve online identifiers and information about page visits, devices and browsers. Optional analytics storage is controlled through the consent banner. Google Consent Mode can send limited, cookieless signals when analytics storage is denied; refusing cookies does not necessarily prevent every connection to Google.

Use “Manage consent” to change your choices. See the Cookie Policy for the categories and services currently identified.

Verified Analytics retention

On 9 November 2026, the Analytics property connected to staging (404395249, G-MWRD0WHEQV) was inspected: event data retention and user data retention were both set to 14 months. Reset on new user activity was enabled, so new activity can restart the user-identifier retention period. These settings concern user-level and event-level data, not browser-cookie expiry or a universal deletion deadline for aggregated reports. No Analytics settings were changed. See Google’s explanation of data retention.

reCAPTCHA retention

The staging reCAPTCHA integration was inspected on 9 November 2026. Neither the Contact Form 7 reCAPTCHA integration nor the theme’s lazy loader defines a local retention or expiry setting. The browser contained _grecaptcha in local storage after focusing the contact form; no expiry or retention field was exposed. No _GRECAPTCHA cookie was found on the checked site, google.com or recaptcha.net URLs in this run, so no cookie lifetime was verified for it. Google’s server-side reCAPTCHA retention and the local-storage deletion schedule remain unconfirmed; no duration is assumed from a default or from the lifetime of a verification token. See Google’s reCAPTCHA information.

Other services on the website

• Contact Form 7 and Google reCAPTCHA: the enquiry form uses Contact Form 7, with Google reCAPTCHA configured for spam protection. When reCAPTCHA loads, Google may receive technical information such as your IP address and browser information.
• Google reviews / Trustindex: the website displays reviews and loads a Trustindex script and external review images. Requests to external providers disclose connection information, including an IP address.
• Girls Pattaya profiles: the website displays club profiles supplied through Girls Pattaya. Some profile images load from Google Cloud Storage. Their external image requests also disclose connection information to the image host.
• External links: Google Maps, social media and Girls Pattaya links take you to other websites whose own privacy terms apply.
• WordPress and translation: WordPress supports website administration and TranslatePress provides language selection. Administrator login cookies are separate from optional visitor analytics.

Provider information: Google Privacy Policy and Trustindex Privacy Policy. Listing a service here does not confirm that its contracts, storage locations or transfer arrangements have been reviewed.

Storage, recipients and international processing

Messages are processed through the website’s enquiry and email setup. The actual mailbox recipients, hosting and email providers, access arrangements, backup retention and deletion schedule still require confirmation. Specific retention periods for messages, technical logs and backups have not been verified. The checked Analytics settings and the unconfirmed reCAPTCHA retention are described above.

The venues are in Thailand and the website uses external services. The countries in which each provider processes data and any applicable international transfer safeguards have not yet been confirmed. This notice makes no claim that all data stays in Thailand or in the European Economic Area.

Your privacy choices and requests

You can withdraw optional cookie permission through “Manage consent”. Depending on the law applicable to your data, you may also have rights to access, correct, erase or obtain a copy of personal data, restrict processing or object to it, and complain to a relevant supervisory authority. Use the contact form to raise a request. The applicable authority and any required representative or data protection officer remain to be confirmed.

Details still needed before production publication

• The controller’s legal name, registered address and relationship to both venues.
• A verified privacy email address and responsible contact; any required representative or data protection officer.
• The purposes and applicable legal basis for enquiry handling, security and each other processing activity.
• Actual retention periods and deletion rules for enquiries, email, logs and backups; Google’s server-side reCAPTCHA retention and the reCAPTCHA local-storage deletion schedule.
• Confirmed recipients, hosting and email providers, processor arrangements, processing countries and transfer safeguards.
• The relevant supervisory authority and arrangements for handling privacy requests.

This staging notice will need updating when those facts are confirmed or the website’s services change.