Privacy Policy

This document has been prepared on the basis of research into the Personal Data Protection Act B.E. 2562 (PDPA), PDPC guidelines issued in September 2022, and standard privacy practice. It should receive a final review by a Thai-qualified lawyer or PDPA specialist before it is published on the live website. Nothing in this document constitutes legal advice to Pattaya Home Co., Ltd.

Last updated: 30 May 2026

Privacy Policy

Pattaya Home Co., Ltd. ("Pattaya Home", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what personal data we collect from visitors to our website and enquirers for our property services, how and why we use it, with whom we share it, and the rights you have under the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), which has been in full force since 1 June 2022.

This policy applies to personal data collected through this website (pattaya-home.com), by email, telephone, or in person in connection with our real estate agency services.

1. Data Controller Identity and Contact

The data controller responsible for your personal data is:

  • Pattaya Home Co., Ltd.
  • 3078, Moo 13, Nongprue, Banglamung, Chonburi 20150, Thailand
  • Email: info@pattaya-home.com

For all data protection enquiries, data subject access requests, or complaints, please contact us at the address or email above. We will respond within 30 days of receiving your request, in accordance with Section 30 of the PDPA.

Pattaya Home does not currently appoint a dedicated Data Protection Officer (DPO). DPO appointment under Section 41 of the PDPA is mandatory only where an organisation (a) is a public authority designated by the PDPC, (b) systematically monitors or profiles the personal behaviour of large numbers of data subjects (generally interpreted as 100,000 or more), or (c) has sensitive personal data processing as a core activity. As a small-to-medium property agency we do not meet these thresholds. If our processing activities expand to trigger this requirement we will appoint and publish DPO contact details promptly.

2. Personal Data We Collect

We collect only the personal data that is necessary for the purposes described in this policy. The categories we collect include:

  • Contact and identity data: name, email address, telephone number, nationality, and passport or ID number (where required for property transaction documentation).
  • Property preference data: budget, preferred location, property type, ownership intentions (freehold/leasehold), and other search criteria you provide.
  • Communication data: records of messages, enquiries, and correspondence you send to us.
  • Transaction and financial data: where you proceed to a property transaction, payment details, proof of funds remittance, and Foreign Exchange Transaction (FET) form references as required by Thai law.
  • Technical and usage data: IP address, browser type, device identifiers, pages visited, and time spent on the site, collected automatically via cookies and server logs (see Section 7).

We do not intentionally collect sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or criminal records) in the ordinary course of our business. If any such data is volunteered by you (for example in a free-text message), we will handle it with the heightened protection required by the PDPA and will not process it without explicit consent unless a statutory exemption applies.

3. Lawful Bases for Processing (Section 24 PDPA)

We process your personal data only where we have a lawful basis to do so. Depending on the specific processing activity, we rely on one or more of the following bases under Section 24 of the PDPA:

  • Consent (Section 24(1)): Where you submit an enquiry form, subscribe to our newsletter, or agree to receive marketing communications, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing (see Section 8 below).
  • Contract performance (Section 24(3)): Where processing is necessary to carry out a contract you have entered into with us (for example an agency agreement), or to take steps at your request before entering such a contract.
  • Legal obligation (Section 24(4)): Where we must process data to comply with Thai law, including anti-money-laundering obligations, tax reporting, and Land Department requirements.
  • Legitimate interests (Section 24(6)): For internal administrative purposes, fraud prevention, improving the website, and sending service-related communications, where our legitimate interests are not overridden by your fundamental rights and freedoms. We have assessed that these uses are necessary and proportionate.
  • Vital interests (Section 24(2)): In circumstances where processing is necessary to prevent a life-threatening risk to you or another person.

4. Purposes of Processing

We use your personal data for the following purposes:

  • Responding to property enquiries and providing property search assistance;
  • Arranging property viewings and introductions to developers or vendors;
  • Preparing and facilitating agency agreements and related transaction documentation;
  • Complying with legal obligations applicable to real estate transactions in Thailand (Land Department filings, anti-money-laundering checks under the Anti-Money Laundering Act B.E. 2542);
  • Sending you property listings, market updates, or promotional content that you have consented to receive;
  • Operating and improving the website and our internal business processes;
  • Fraud prevention and security;
  • Exercising or defending legal claims.

5. Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by Thai law:

  • Enquiry and contact data where no transaction proceeds: up to 2 years from your last contact with us, after which it is deleted or anonymised.
  • Transaction and contract data: for the duration of any agency agreement and for 10 years thereafter, consistent with the prescriptive periods under the Thai Civil and Commercial Code and tax record-keeping obligations.
  • Anti-money-laundering records: at least 5 years from the date of the relevant transaction, as required by the Anti-Money Laundering Act.
  • Technical/cookie data: see Section 7. Where we cannot specify a precise duration, we apply a standard data-minimisation review every 12 months.

When personal data is no longer required, it is securely deleted, destroyed, or anonymised.

6. Disclosure to Third Parties

We do not sell your personal data. We may share it with the following categories of recipients, strictly for the purposes described in this policy:

  • Property developers and vendors to whom we introduce you as part of an agreed property search;
  • Legal and professional advisers (e.g. Thai lawyers, notaries, surveyors) assisting with transactions you are involved in;
  • Thai government authorities including the Land Department, Revenue Department, and Anti-Money Laundering Office (AMLO) where required by law;
  • IT and website service providers who process data on our behalf under a data processing agreement, providing equivalent data protection safeguards;
  • Financial institutions where necessary to process payments or verify fund remittances.

All third-party processors we engage are required to protect your personal data to a standard consistent with the PDPA and are permitted to use it only for the specified purpose.

7. Cookies and Tracking Technologies

This website uses cookies — small text files placed on your device — and similar technologies to distinguish you from other users and to improve your browsing experience. We use:

  • Strictly necessary cookies: Required for the website to function (e.g. session management). These do not require your consent.
  • Analytics/performance cookies: Help us understand how visitors use the site (e.g. pages visited, time on site). We will only set these with your consent.
  • Marketing/targeting cookies: Used to show you relevant property listings or advertisements. We will only set these with your explicit consent.

When you first visit the website a cookie banner will ask for your consent to non-essential cookies. You may withdraw or change your cookie preferences at any time by adjusting your browser settings or using the cookie preference centre accessible in the website footer. Refusing optional cookies will not affect your ability to use the core website.

8. Cross-Border Data Transfers

Our primary operations and data storage are in Thailand. Where we engage cloud or IT service providers whose servers are located outside Thailand, we ensure that any such transfer meets the requirements of Sections 28 and 29 of the PDPA. This means transfers proceed only when one of the following applies:

  • The recipient country has been recognised by the PDPC as having an adequate level of data protection ("Green Route" under Section 28);
  • Appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or certified mechanisms recognised under Section 29 ("Safeguard Route"); or
  • You have given explicit informed consent to the transfer, having been informed that the destination country's protection standards may differ from Thailand's.

9. Your Rights as a Data Subject (Sections 30–36 and 73 PDPA)

Under the PDPA you have the following rights regarding your personal data. To exercise any right, contact us at info@pattaya-home.com. We will respond within 30 days.

  • Right of access (Section 30): You may request confirmation of whether we hold personal data about you and obtain a copy of it.
  • Right to data portability (Section 31): Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
  • Right to object (Section 32): You may object to processing based on legitimate interests or for direct marketing purposes. We will stop unless we have compelling legitimate grounds that override your interests.
  • Right to erasure / de-identification (Section 33): You may request deletion or anonymisation of your personal data when it is no longer necessary for the purposes it was collected, when you withdraw consent (and there is no other lawful basis), or when it has been unlawfully processed.
  • Right to restrict processing (Section 34): You may ask us to suspend processing in certain circumstances, for example while the accuracy of the data is being contested.
  • Right to rectification (Section 36): You may request correction of inaccurate or incomplete personal data held about you.
  • Right to withdraw consent (Section 19): Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Right to complain (Section 73): You have the right to lodge a complaint with the Personal Data Protection Committee (PDPC), the Thai data protection regulator, if you believe we have processed your personal data in breach of the PDPA. Contact details for the PDPC are available at www.pdpc.or.th.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These include access controls, secure encrypted communications (HTTPS), and regular security reviews. Only authorised staff who need access to fulfil their duties may access your personal data.

In the event of a personal data breach that is likely to pose a risk to the rights and freedoms of data subjects, we will notify the PDPC within 72 hours of becoming aware of the breach, in accordance with the PDPA. Where the breach creates a high risk to you personally, we will also notify you without undue delay, describing the nature of the breach and the steps you can take to protect yourself.

11. Business Identification

Thailand does not impose a formal statutory "imprint" requirement equivalent to that found in some European jurisdictions. However, in the interest of transparency and in line with the consumer protection principles of the Electronic Transactions Act B.E. 2544 (2001) and good practice for Thai e-commerce businesses, we voluntarily publish our full company name, registered address, and contact information on this website. The DBD Registered certification from the Department of Business Development is an optional credential that verifies commercial registration status; information about its availability for this website will be updated when applicable.

12. Children's Privacy

Our website and services are directed at adults. We do not knowingly collect personal data from children under the age of 10. Where a child under 10 seeks to provide personal data, consent from a parent or guardian is required under the PDPA before we may collect it. For minors aged 10–20, we may require parental or guardian consent depending on the nature and extent of the data involved and applicable legal capacity rules.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will indicate when the policy was last revised. Where changes are material, we will take reasonable steps to notify you (for example by email or a prominent website notice). We encourage you to review this policy periodically.

14. Contact for Data Requests

To exercise any of your rights under this policy or to ask questions about our data practices, please contact:

  • Pattaya Home Co., Ltd. — Data Privacy Enquiries
  • 3078, Moo 13, Nongprue, Banglamung, Chonburi 20150, Thailand
  • Email: info@pattaya-home.com

We will acknowledge receipt of your request within 7 days and provide a substantive response within 30 days. If we need to extend this period due to the complexity of the request, we will notify you in advance.