This policy explains how we collect, use and protect your personal data.
1. Categories of personal data we collect
General visitors — IP address, device and browser type, pages visited, the website you arrived from, information obtained from cookies, and approximate location where you have permitted its use for searching for nearby properties.
Members — name, email address, telephone number, LINE ID, and the list of properties you have saved.
Property owners — name, national identification number, a copy of the national identification card, a copy of the passport, contact channels, and title document information.
Persons submitting a call-back request — name, telephone number, email address, and the property or project of interest.
Persons transacting with us — payment information and bank account details.
Other data — photographs, moving images, and any other information regarded as personal data under the personal data protection law.
2. Sources of personal data
We receive personal data from you directly, collecting it through the following stages of service:
when you register for membership, post a listing, complete a call-back form, or contact us by telephone, email or LINE, or when you submit a request to exercise any of your rights with us;
when you subscribe to receive news, advertising material or marketing information from us;
from the collection of your platform usage data through browser cookies;
when you purchase a service or product from us;
when you log in to your user account on our platform or on other related applications.
We may also collect your personal data that is accessible to us from other sources, such as search engines, social media, government agencies and other third parties.
3. Purposes for which the data is used
To provide the services you have requested, such as publishing listings, responding in relation to property viewing appointments, and answering enquiries.
To verify identity and check the accuracy of listings, to prevent fraud and misuse of the service, to prepare contracts, and to comply with tax law and anti-money laundering law.
To improve the quality of the website, and to send marketing communications where you have given consent.
To verify that you are the sole person accessing your account.
To conduct market research and manage the relationship between the service provider and the user.
To comply with legal requirements and state regulations, including consent for the service provider to transfer personal data to the service provider’s business group and partners, data processors, or any agency under contract with the service provider.
4. Processing of personal data
Upon receiving personal data from you, we will proceed as follows:
Collect the data by recording it on the Company’s devices and equipment, namely the Company’s computers and mobile telephones, and store it on computer systems, namely a self-hosted server and a server service provider.
Use the personal data collected in the Company’s operations in accordance with the purposes set out under the heading “Purposes for which the data is used”.
The Company will disclose data to employees under the Company’s employment contracts whose scope of duties relates to the data, and will disclose data on the Company’s platform or on social media channels for advertising purposes.
5. The legal bases we rely upon
We process your data on the following legal bases under the Personal Data Protection Act B.E. 2562 (2019):
Performance of a contract — providing listing services, property search, and call-backs as requested by you.
Compliance with a legal obligation — preparing tax documents, verifying identity under anti-money laundering law, and retaining system usage records.
Legitimate interest — preventing fraud, maintaining the security of the system, and improving the website.
Consent — sending marketing communications and using non-essential cookies, for which you may withdraw consent at any time.
6. Disclosure of data to third parties
The Company may disclose data to co-agents or to the staff responsible for your listing, to system service providers that have entered into confidentiality agreements with the Company, and to government agencies where ordered to do so by law.
The Company does not sell, rent or exchange your personal data with any third party for marketing purposes.
Should there in the future be a merger, sale of business, or transfer of part of the business, your data may be transferred to the transferee, provided that the transferee must protect your data to at least the standard of this Policy, and we will give you prior notice. Where a system service provider we use maintains servers abroad, we will transfer data only to destinations having adequate data protection measures as required by law.
7. Retention period for personal data
We will retain your personal data for the purposes notified to you, or for the period prescribed by law, as follows:
Member account data — 1 year after the account is closed.
Contracts and identity verification documents — 10 years, in accordance with the prescription period and anti-money laundering law.
Accounting and tax documents — 5 years.
System access records — at least 90 days, as prescribed by law.
Upon expiry of that period, the data will be deleted or rendered incapable of identifying the individual.
8. Rights of the data subject
Under the personal data protection law, you have the right to take the following actions:
Right to withdraw consent: you have the right to withdraw consent to the processing of personal data to which you have consented, at any time during which your personal data remains with us.
Right of access: you have the right to access your personal data and to request that we provide you with a copy of such personal data, and to request that we disclose how we acquired personal data to which you did not consent.
Right to data portability: you have the right to obtain your personal data where we have arranged that personal data in a format readable or usable by automatic means and capable of being used or disclosed by automated means; you further have the right to request that we send or transfer such personal data in that format to another data controller where this can be done by automated means, and the right to obtain personal data that we have sent or transferred in that format directly to another data controller, except where this cannot be done for technical reasons.
Right to rectification: you have the right to request that we correct inaccurate data or complete incomplete data.
Right to erasure: you have the right to request that we delete your data on certain grounds.
Right to restriction of processing: you have the right to restrict the use of your personal data on certain grounds.
Right to object: you have the right to object to the processing of your personal data on certain grounds.
Right to lodge a complaint: you have the right to lodge a complaint with the Office of the Personal Data Protection Committee where you are of the view that we, our employees or our contractors have violated or failed to comply with the personal data protection law; contact may be made at the address stated in the contact channels at the end of this document.
You may exercise the above rights as a data subject by contacting our officer through the contact channels specified below. The Company will act upon the request within 30 days from the date of receipt, free of charge. Should the Company refuse a request to exercise a right, the Company will notify you of the reasons for the refusal in writing and will record the same, and you have the right to lodge a complaint with the Office of the Personal Data Protection Committee.
9. Cookies
Cookies are text files stored on your device in order to remember your use of the website. We use cookies for the purpose of improving the efficiency of access to our services over the internet and improving the efficiency of platform use, in the following cases:
Strictly necessary cookies — enable secure login and use of the website; always active and not requiring consent.
Functionality cookies — remember your settings, such as your chosen language and filters.
Performance cookies — collect anonymous visitor statistics in order to improve the website.
Advertising cookies — display advertising matching your interests.
Third-party cookies — set by external service providers that we use, such as Google Analytics.
The latter four categories operate only once you have given your acceptance, and you may configure your browser settings to refuse non-essential cookies.
10. Security of personal data
We apply appropriate technical and administrative measures to prevent unauthorised access, alteration, loss or disclosure of data, including encryption of data in transit, encrypted storage of passwords, restriction of access rights to relevant personnel only, and logging of the history of data access and amendment.
11. Notification of a personal data breach
In the event that a breach of your personal data occurs, we will notify the Office of the Personal Data Protection Committee without delay and within 72 hours of becoming aware of the breach, insofar as this is feasible.
Where the breach carries a high risk of affecting your rights and freedoms, we will notify you of the breach together with the remedial measures without delay, through channels such as the website, email, telephone or letter.
12. Amendment of this policy
We review this Policy periodically to ensure consistency with the law. You may inform yourself of the amended terms and conditions of this Policy through our website.
13. Privacy policies of other websites
This Privacy Policy applies solely to our services and to the use of our website. Should you click a link to another website, even by way of a channel on our website, you must study and comply with the privacy policy appearing on that website, entirely separately from that of our website.
Contact channels
Data Controller — Preps Development Co., Ltd.
Address: 600/196 Arinsiri Village, Sukhumvit Soi 3, Sukhumvit Road, Saen Suk Sub-district, Mueang Chonburi District, Chonburi Province 20130
Email: [email protected]
Supervisory Authority — Office of the Personal Data Protection Committee
Address: 7th Floor, Rathaprasasanabhakti Building, Government Complex Commemorating His Majesty the King’s 80th Birthday Anniversary, Chaeng Watthana Road, Thung Song Hong Sub-district, Lak Si District, Bangkok 10210. Tel. (+66) 02-142-2233
