Kampot GuideKampot Guide
Sign up

Legal & Compliance

Privacy Policy & Cookies

Last updated: October 21, 2026 · Effective date: October 21, 2026 · Location: Kampot Province, Kingdom of Cambodia

1. Overview and Commitment

Kampot Guide (“we”, “us”, or “our”) operates kampot.guide. We are committed to respecting your personal privacy and maintaining transparent, responsible data collection practices. This Privacy Policy explains what information we collect when you visit our website, install the Progressive Web App (PWA), use Ask Kampot, search places, or register a business, and how that information is handled under applicable regulations including the Cambodian Law on E-Commerce and Consumer Protection.

For data-protection inquiries, email contact@kampot.guide.

2. Information We Collect

A. Visitor data

  • Optional location: With your explicit browser permission, we use device GPS to show nearby verified listings, map directions, and Ask Kampot “near me” answers. A near-me Ask request may send coordinates with that query so we can rank nearby listings. We do not keep a location history on our servers.
  • Ask Kampot prompts: Questions you submit are processed to generate itinerary ideas and listing answers. Signed-in credit balances (100 free credits each week, 10 credits per AI answer) are stored against your account. Guest use is limited on the device.
  • Device and browser details: Google Analytics 4 (Property ID: G-9FFNSV9376) measures aggregate traffic, general geographic region, browser type, device category, page views, and referral sources. IP addresses are masked/anonymized by Google.
  • PWA and local storage: Saved places, comparison selections, recently opened listings, and theme preference stay on your device in kampot-theme and kampot-ledger-v1. The installed app can cache the homepage, directory shell and a few saved or recently opened place pages so they reopen without a network. Maps and other live data are not cached. If you sign in, the saved-place slugs are also stored with your account so the list can sync across devices. Comparison selections and theme stay on the device and are not sold.
  • Inquiries: When you send an inquiry to a hotel, restaurant, or tour operator through a listing contact form, we collect the details you provide (name, phone, email or WhatsApp/Telegram handle, dates, party size, and message) so they can be transmitted to that business.

B. Merchant and business data

  • Contact details: Owner or manager names, business phone numbers, email addresses, and WhatsApp or Telegram handles.
  • Verification media: Door and entryway photographs, exact map coordinates, opening hours, menu files, and visit notes collected during the physical agent visit. Private Guide Desk visit records may include visit observations, agreed next steps, follow-up dates and saved aggregate performance snapshots. These are accessible only to authorized guide accounts within their assigned business scope and the site owner, and are removed when the business is deleted.
  • KHQR transaction confirmations: Dates, amounts, and plan duration for the $10 verification fee and promotional subscriptions, recorded for accounting. We do not store card numbers, PINs, or bank login credentials.
  • Account authentication: Business owners and administrators create credentials (email and password) to access the listing dashboard. Passwords are cryptographically hashed and never stored in plain text.

C. Reviews, rewards, and directory metrics

  • Reviews and rewards: We store the reviews you publish, your account ID, the reviewed business, reward dates and credit amounts. Business reward records include points earned, removed and redeemed, the redeeming owner account and the resulting subscription dates. Your account shows your own earnings; business owners see their business points and redemption history, not your private AI credit balance. Public review display names, ratings, text, dates and business responses may also appear in Kampot Guide widgets embedded on business websites. The site owner can review registered account names and emails, restrict authenticated account actions or review participation, and moderate reviews. Access decisions, reasons and original and changed review content are recorded privately for moderation accountability and appeals, including after public review removal. Only the site owner can access these moderation records. These widgets do not share your account ID, email or private reward balance and add no tracking scripts. Our moderation and appeals playbook explains how to report content or request reconsideration by email without signing in. Send only relevant evidence, never passwords, login codes or sensitive documents.
  • Sponsored Ask Kampot cards: We count visible sponsored cards and taps on their page, call, WhatsApp, directions, enquiry and offer links. Random placement references prevent repeated taps from inflating one card's counts. Business reports contain totals, not visitor identities, conversation text or precise locations. A link tap is not proof of a completed booking or sale.
  • Directory interaction metrics: We count aggregate, anonymized actions on listings (phone taps, directions, menu views, QR scans). These counts are not linked to your personal identity.

3. How We Use Your Information

We use collected information solely for legitimate operational and directory purposes, including:

  • Displaying verified directory listings, opening hours, door photos, and interactive map pins, and providing one-tap WhatsApp, Telegram, call, and enquiry buttons.
  • Routing reservation inquiries and customer lead messages directly to the designated business.
  • Scheduling physical verification visits with field agents across Kampot Province.
  • Processing B2B KHQR payments and managing merchant dashboard access.
  • Personalizing Ask Kampot answers from the question you asked and, when you allow it, a near-me location for that query.
  • Providing business subscribers with aggregate analytics on directory visibility.
  • Responding to customer-service inquiries, review-moderation requests, and technical issues.
  • Maintaining system security, preventing automated abuse, and enforcing our Terms and Conditions.

4. Cookies and Tracking Disclosure

Cookies are small text files placed on your device by your web browser. Kampot Guide utilizes a minimal cookie architecture:

TypeProviderPurposeDuration
AnalyticsGoogle AnalyticsMeasures aggregate traffic, bounce rate, and site usage patterns (_ga, _ga_*).Up to 2 years
AuthenticationKampot GuideMaintains secure session state for logged-in visitors, business owners, and administrators.Session / 30 days
Client preferencesBrowser LocalStorageSaves theme, recent places, and guest bookmarks on the device. Signed-in saved places are also stored with the account. Maps stay on the network.Persistent until cleared

You can control or disable cookies through your browser settings at any time. Disabling cookies will not prevent you from browsing directory listings, viewing guides, or using the map.

5. Third-Party Services and Data Sharing

We do not sell, rent, or trade your personal information to data brokers or third-party advertisers.

We share information only in the following limited situations:

  • With listed businesses: When you submit a booking request or inquiry for a specific business, your contact details and message are shared with that business so they can respond to you.
  • KHQR payment processors: Verification and subscription payments are made in person via KHQR through Bakong-compliant banks (for example ABA). The scan happens on the agent's or merchant's banking app. Kampot Guide records the date, amount, and plan, not card numbers.
  • Maps: Map tiles and geocoding use OpenStreetMap contributors and Carto. Directions buttons may open Google Maps or another maps app you choose.
  • Messaging apps: One-tap WhatsApp and Telegram buttons open those apps with the contact details the venue published. Kampot Guide does not operate those services.
  • Agency partner: Web Technics (web-technics.com) receives the merchant details needed to fulfil the website-and-listing bundle when a qualifying client uses that promotion.
  • Technical service providers: Cloud hosting, database hosting, and related infrastructure process data under security obligations.
  • Legal requirements: We may disclose information if required by applicable law, regulation, legal process, or lawful governmental request in the Kingdom of Cambodia.

6. Payment Data Security

Kampot Guide does not store, process, or collect credit card numbers, debit card PINs, or sensitive banking credentials on our web servers. Listing verification fees ($10 USD) and subscription payments are made in person via national KHQR standard QR codes or cash directly to authorized agents, or arranged via verified Cambodian bank transfers. Payment records maintained in the business dashboard reflect transaction dates, amounts, and plan duration for internal accounting purposes.

7. Data Retention and Security

Data transmitted between your device and Kampot Guide is encrypted in transit using Transport Layer Security (TLS). We implement industry-standard physical, technical, and managerial safeguards to protect your personal information against unauthorized access, loss, or alteration.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal and accounting requirements. Merchant profile data is retained while the venue remains listed. Audit photographs and verification logs are kept for accountability. Visitor analytics are aggregated anonymously.

Removing a review removes its public content. A minimal reward record (account ID, business, review reference, dates and reward amounts) is retained separately to prevent duplicate rewards and reconcile credit balances and business subscriptions. These records do not retain the deleted review text or author name. Reward and redemption accounting records may remain after account deletion; contact us about data retention or deletion requests.

8. Your Rights and Data Requests

You have the right to:

  • Request confirmation of whether we hold personal information regarding you.
  • Request correction or updating of inaccurate information, including a business profile.
  • Request deletion of your contact inquiry history or business listing account.
  • Clear saved listings and preferences at any time by clearing your browser’s local storage.

To exercise these rights, email contact@kampot.guide with the subject Data Subject Request. Tell us whether you want access, a correction, or removal, and enough detail to find the record (for example a listing URL or the email on the account). We aim to process requests within 14 business days. You may also write to privacy@kampot.guide.

9. Contact Us

Data Controller & Privacy Contact

If you have questions, feedback, or data privacy requests, please reach out to: