Privacy Policy

This policy also covers the Morning Tree Resort mobile application. Through the app you can make and manage bookings, complete check-in, pay, and hold loyalty benefits. The app processes the same guest information described below: your name, phone number, email address and nationality; photographs of the identity document you provide; your booking, stay and payment records; your loyalty points, tier and coupons; and security information used to protect your sign-in, including one-time passcodes sent by SMS and hashed IP and other security records used to detect misuse of the sign-in system.

• Guest contact details provided at booking or check-in: full name, phone number, email address, nationality, and a copy of a government-issued ID document where required by law.
• Booking and stay records: reservation dates, room assignment, number of guests, special requests, and check-in / check-out history.
• Payment records: amount, currency, payment method, receipt number, and (for bank transfers) the transaction reference number. We do not store full payment-card numbers.
• Communications that you send to the resort (phone, email, Telegram, or messaging platforms), and any notes our staff record about your stay.
• Staff account data for internal users of the system: username, role, and activity logs used for operations, security, and payroll.

• Manage reservations, check-in, room assignment, billing, and receipts.
• Communicate with you about your booking, stay, or requests.
• Comply with guest registration and tax obligations under Cambodian law.
• Internal reporting on occupancy, revenue, and guest satisfaction.
• Protect the security and integrity of the system (fraud prevention, audit logs).

We do not sell personal data. We share information with: (a) payment providers and banks to process and verify transactions; (b) government authorities where required by law, including guest registration with the immigration and tourism authorities; and (c) messaging providers such as Telegram, Facebook or Instagram, only when you choose to contact us through them.

We also rely on service providers to run the service: a hosting and database platform that stores our booking records and document files; the payment gateway that processes card and wallet payments (ABA PayWay); an SMS provider that delivers your one-time sign-in codes; and, on our website only, a bot-protection check (Cloudflare Turnstile) on the booking form and map and font resources loaded from Google.

Booking, financial, and tax records are retained for the period required by Cambodian hospitality and tax law. Guest profiles are kept to recognise returning guests and can be archived on request. Internal communications and activity logs are kept for a reasonable operational period and then removed.

Access to the system is restricted by role-based permissions. Authorised staff can see only the information their role requires. Guests signed in to their own account, on the website or in the app, can see their own profile, bookings, payments and loyalty record, and no other guest's. Identity documents are stored in private, access-controlled storage. Data is transmitted over encrypted connections (HTTPS/TLS), and sensitive settings are stored as encrypted secrets. Payment-card numbers are never stored in full.

You may request access to, correction of, or deletion of your personal data by emailing gm@morningtreeresort.com. See our Data Deletion Instructions for the step-by-step process. We will respond within a reasonable timeframe, subject to records we are legally required to keep.