Reserve a Table

Reserve your table by Phone or on LINE.

Reserve on LINECall 098 269 4573

Privacy and cookies

Privacy Policy

Last updated: 4 November 2026

1. Who runs this website

The website koyapremium.com is operated by Silver Heritage Property Co., Ltd. (trading as Koya Premium Izakaya & Sushi), the data controller for this website. This policy explains what personal data is processed when you use the website, under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA), and the choices you have.

2. What this website does

This is an information website: it shows our menu, opening hours and location. It has no user accounts, contact forms, online ordering, online booking or payments. Reservations are made by phone call or LINE, outside this website. This policy covers the website only; when you use LINE, LINE’s own privacy terms apply to that use.

3. Information we process

Needed to run the website (no consent required): the site is delivered through Cloudflare, our hosting and security provider. To deliver pages and protect the site, Cloudflare processes technical data on our behalf, such as your IP address, browser type and the pages requested. The basis for this processing is our legitimate interests (see section 5). We do not use this data for marketing.

Your cookie choice: stored in your own browser’s localStorage under the name koya-consent. It is not an HTTP cookie. It records only whether you accepted or declined, and the date. It is not sent to us.

Analytics (only if you accept): we use Google Analytics 4 through Google Tag Manager. Google may collect data such as the pages you view, time spent on pages, how you arrived, language, device type, operating system and browser, and an approximate location derived from your IP address, together with an online identifier stored in a cookie. We treat this as personal data under the PDPA. We do not describe it as fully anonymous.

4. Cookies and browser storage we use

If you decline, or do not choose, Google Tag Manager and Google Analytics are not loaded and no Google cookies are set. The koya-consent entry below is not an HTTP cookie: it is stored in your browser’s localStorage, is never sent to any server, and is only written after you make a choice.

  • koya-consent (localStorage)Remembers your choice (accepted or declined) and the date. Stored in your browser’s localStorage. It is not an HTTP cookie and is not sent to us or to anyone else.Set by: This website (first party) · Duration: Up to 12 months, then we ask again · Type: Necessary preference storage (not an HTTP cookie)
  • _gaGoogle Analytics: a random identifier that lets Google tell returning visitors apart.Set by: Google (set only if you accept) · Duration: Up to 2 years (Google’s default) · Type: Analytics, with consent
  • _ga_S68Q677WEMGoogle Analytics: keeps the state of your visit (session). The name is “_ga_” followed by our Google Analytics 4 measurement ID without the “G-”. It is not the Google Tag Manager container ID.Set by: Google (set only if you accept) · Duration: Up to 2 years (Google’s default) · Type: Analytics, with consent

The names and lifetimes of the Google Analytics cookies are Google’s defaults and may change.

5. Purpose and legal basis

We use analytics only to see visit statistics and improve the website. Our consent request covers analytics only. For analytics, the legal basis is your consent (section 19 of the PDPA). Declining does not affect your use of the website: every page works the same. Technical data processed by Cloudflare to deliver and protect the website is processed on the basis of our legitimate interests in running and securing the website (section 24(5) of the PDPA), not consent.

6. Changing your mind or withdrawing consent

You can change your choice at any time with the “Cookie Settings” link at the bottom of every page, then choose “Decline”. This stops further collection, removes the Google Analytics cookies from your browser, and means those tools are not loaded on your later visits. Withdrawing consent does not affect processing already done, and does not delete data Google has already received, which is kept for the period in section 8.

7. Recipients and transfers abroad

Analytics data is sent to Google, which may process it outside Thailand, including in countries whose data-protection standards may differ from Thailand’s. Cloudflare provides the website’s infrastructure worldwide.

8. How long data is kept

Four different periods apply:

  • Google Analytics event data: kept for 2 months, then deleted automatically. This is the retention setting in our Google Analytics account for event-level data (used for detailed explorations). Summary reports built from aggregated figures may be kept longer.
  • Google Analytics user data (data linked to the identifier in your cookie): kept for 14 months. The period restarts each time you visit again while analytics is accepted, so for a returning visitor the data is kept for up to 14 months after their most recent visit.
  • Your cookie choice (koya-consent): kept in your browser’s localStorage for up to 12 months, then we ask again. It stores only your choice, not analytics data.
  • Technical data processed by Cloudflare: kept for the period Cloudflare sets in its own privacy policy (cloudflare.com/privacypolicy). We do not state a specific period here.

The Google Analytics cookies on your device (_ga and _ga_S68Q677WEM) have their own lifetime of up to 2 years (Google’s default), but they are removed when you decline.

9. Your rights

Under the PDPA you have the right to be informed, to access and obtain a copy of your data, to data portability, to object, to request erasure or anonymisation, to request restriction of use, to have data corrected, and to withdraw consent. You may also complain to the Office of the Personal Data Protection Committee (PDPC) of Thailand.

Because analytics data is linked to an identifier in a cookie on your device, we may ask you for extra details, such as the value of your _ga cookie, to find your data.

10. Links to other services

The website links to Instagram, LINE and Google Maps. When you follow those links you leave our website, and that service’s own policies apply.

11. Contact us

The data controller for this website is Silver Heritage Property Co., Ltd. To use your rights or ask a privacy or analytics question, contact us:

The email address above is the primary contact. It is managed by Nova Management, which looks after this website on the company’s behalf. Phone, LINE and Instagram are optional ways to reach us.

12. Changes to this policy

We may update this policy. The date of the latest update is shown at the top of this page.