Privacy Policy

1. Introduction

Siribaan Property Group ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and other applicable laws.

Please read this policy carefully. By using our website or submitting an inquiry, you acknowledge that you have read and understood this policy. If you do not agree, please do not use our website or services.

2. Data Controller

The Data Controller responsible for your personal data is:

3. Personal Data We Collect

"Personal data" means any information relating to an identified or identifiable natural person. We collect the following categories:

• Identity & contact data — full name, email address, and phone number provided through inquiry or contact forms.
• Inquiry & transaction data — messages, preferred viewing dates, budget range, property interests, and correspondence with our team.
• Identity verification data — where required for property transactions, identification documents (e.g., passport or national ID) collected in accordance with applicable KYC and anti-money laundering obligations.
• Technical & usage data — IP address, browser type, operating system, pages visited, time spent, and referring URLs, collected automatically when you use our website.
• Cookie data — preferences and session data stored via cookies as described in Section 6 below.

We do not knowingly collect sensitive personal data (such as health, religion, or biometric data) unless required by law and with your explicit consent.

4. Lawful Basis for Processing

Under the PDPA (Section 24), we process your personal data only where we have a lawful basis to do so:

• Consent — where you have given us clear consent to process your data for a specific purpose (e.g., receiving marketing updates or newsletters).
• Contractual necessity — where processing is necessary to take steps at your request prior to entering into, or in the performance of, a contract (e.g., processing a property inquiry or arranging a viewing).
• Legal obligation — where we are required to process data to comply with Thai law, including anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Legitimate interests — where processing is necessary for our legitimate business interests (e.g., improving our website, fraud prevention, internal analytics), provided those interests are not overridden by your rights.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

• Responding to your property inquiries and arranging property viewings.
• Providing property recommendations, updates, and market information you have requested.
• Processing property transactions and fulfilling our obligations as a real estate agent.
• Verifying identity and conducting KYC/AML checks as required by Thai law.
• Improving, personalising, and administering our website and services.
• Sending marketing communications where you have consented (you may withdraw consent at any time).
• Complying with legal and regulatory obligations.
• Preventing and detecting fraud or other unlawful activity.

We do not sell your personal data to third parties.

6. Cookies

Our website uses cookies — small text files stored on your device. We use the following types:

• Strictly necessary cookies — essential for the website to function. These cannot be disabled without affecting core functionality.
• Analytics cookies — help us understand how visitors interact with our website by collecting anonymous usage statistics. These are only set with your consent.
• Preference cookies — remember your settings and preferences to improve your experience on return visits.

You may disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the performance or functionality of parts of the website.

7. Sharing of Personal Data

We may share your personal data with:

• Service providers — trusted third parties who assist in operating our website and delivering our services (e.g., cloud hosting, email delivery, analytics platforms). These parties are bound by data processing agreements and may not use your data for their own purposes.
• Partner agents and developers — where necessary to facilitate a property transaction you have expressed interest in, and only with your knowledge.
• Regulatory authorities — government bodies, law enforcement agencies, or regulators where disclosure is required by Thai law or court order.
• Professional advisors — lawyers, auditors, and insurers, under obligations of confidentiality.

We do not share your data with any third party for their own marketing purposes without your explicit consent.

8. International Data Transfers

We use cloud-based infrastructure and service providers whose servers may be located outside Thailand. Where personal data is transferred to a country that does not have an equivalent level of data protection, we ensure appropriate safeguards are in place — including contractual clauses that require the recipient to protect the data to the same standard required under the Thailand PDPA (Sections 28–29). By using our website, you acknowledge that your data may be processed in such jurisdictions.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Inquiry data — retained for up to 24 months from the date of the last interaction.
• Transaction records — retained for at least 5 years as required under Thai commercial and tax law.
• Marketing consent records — retained until consent is withdrawn or becomes irrelevant.

Upon expiry of the applicable retention period, your data is securely deleted or anonymised.

10. Your Rights Under the PDPA

Under the Thailand Personal Data Protection Act B.E. 2562, you have the following rights with respect to your personal data:

• Right to be informed — to be told how your data is collected and used (this policy fulfils that obligation).
• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing — to request that we limit the ways in which we use your data in certain circumstances.
• Right to data portability — to receive your personal data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@siribaanproperty.com. We will respond to your request within 30 days in accordance with PDPA Section 23. We may need to verify your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC), the supervisory authority under the Thailand PDPA.

11. Children's Data

Our website and services are not directed at, and we do not knowingly collect personal data from, persons under the age of 20. If you believe that a child under 20 has provided us with personal data without appropriate parental or guardian consent, please contact us immediately at info@siribaanproperty.com and we will take steps to delete such data.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security reviews. However, no method of internet transmission is entirely secure. In the event of a personal data breach that is likely to result in high risk to your rights, we will notify you and the PDPC as required by the PDPA.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. Any material changes will be posted on this page with a revised effective date. Where required by law, we will notify you directly. We encourage you to review this policy periodically.

14. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us at: