Privacy Policy
ASAP ESTATE CO., LTD. (บริษัท อะทรัพย์ เอสเตท จำกัด) — Effective: v2.0 — 24 June 2026
This Privacy Policy explains how ASAP ESTATE CO., LTD. collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand.
1. Introduction
ASAP ESTATE CO., LTD. (Registration No. 0105568170109), located in Bangkok 10160, Thailand (the “Company”, “we”, “us”, or “our”), is committed to protecting the privacy and personal data of every person who visits our website at https://asapestate.com or uses our real-estate services.
This Privacy Policy describes the categories of personal data we process, the purposes and legal bases for processing, the parties with whom we share data, the safeguards we apply, and the rights available to you under the Thailand Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”).
By using our website or services, you acknowledge that you have read and understood this Policy. Where the law requires your consent, we will request it separately and explicitly.
2. Personal Data We Collect
Data you provide to us: your name, email address, telephone number, and any message content you submit through contact forms, property-inquiry forms, appointment bookings, or our chat assistant. If you list or transact a property, this may include identification documents and property details that you choose to upload.
Data collected automatically: device and browser information, approximate location derived from your IP address, pages viewed, and interaction events. We use cookies and similar technologies, and analytics provided by Google, to understand and improve how our services are used. IP addresses are retained for a limited period for security purposes.
Data received from third parties: where you choose to sign in using a social login provider (Google or Facebook), we receive your name, email address, and profile picture from that provider. We may also receive publicly available property-listing information from real-estate portals.
3. How We Use Your Data
We use your personal data to respond to your inquiries, to match you with suitable properties, to facilitate and administer real-estate transactions, and to provide, maintain, and improve our website and services.
With your consent, we may send you property recommendations and marketing communications relevant to your stated interests. You can withdraw this consent at any time.
We also process data to ensure the security of our platform, to detect and prevent fraud or abuse, and to comply with our legal and regulatory obligations. We do not use your data for purposes incompatible with those described here without first obtaining your consent.
4. Legal Basis for Processing under the PDPA
Consent: where you voluntarily provide data or opt in to marketing, our processing relies on your consent, which you may withdraw at any time.
Contractual necessity: where processing is required to take steps at your request before entering into, or to perform, a brokerage or service agreement with you.
Legal obligation: where we must process data to comply with applicable Thai law, including anti-money-laundering, tax, and accounting requirements.
Legitimate interest: where processing is necessary for fraud prevention, network and information security, and the improvement of our services, balanced against your rights and freedoms.
5. Social Login and Third-Party Authentication
Our website allows you to register or sign in using Google or Facebook. When you do so, the provider authenticates you and shares a limited set of profile data with us: typically your name, email address, and profile picture.
We use this information solely to create and secure your account, to personalize your experience, and to communicate with you about our services. We do not post to your social-media accounts and do not receive your social-media password.
You can disconnect a linked social account at any time and may request deletion of the data we received via that provider through our data-deletion page at https://asapestate.com/{locale}/data-deletion or by contacting us directly.
6. Cookies and Tracking Technologies
Essential cookies are necessary for authentication, security, and the core functioning of our website; these cannot be disabled without affecting service availability.
Analytics cookies, provided through Google, help us understand aggregate usage patterns. Where required, marketing or measurement cookies are activated only with your consent.
You can manage or disable cookies through your browser settings. Disabling certain cookies may limit the functionality available to you.
7. Disclosure to Third Parties and Sub-processors
We do not sell, rent, or trade your personal data. We disclose data only as described in this Policy: with your consent, to fulfill a service you request, to comply with the law, or to the sub-processors that operate our platform on our behalf.
Our sub-processors include: Supabase (database hosting), Google (analytics and authentication), Vercel (application hosting), Cloudinary (media storage and delivery), and Facebook (authentication). Each acts under a data-processing arrangement and only on our documented instructions.
We may also disclose data to competent authorities where required by a valid legal request, and to professional advisers under a duty of confidentiality.
8. International Data Transfers
Some of our sub-processors operate servers located outside Thailand, including in the United States, the European Union, and Singapore. As a result, your personal data may be transferred to and processed in these jurisdictions.
Where we transfer data internationally, we ensure that appropriate safeguards are in place — such as contractual protections and provider certifications — consistent with the cross-border transfer requirements of the PDPA.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
Contact and inquiry data are generally retained for the duration of our relationship with you and for a reasonable period thereafter. Transaction and accounting records are retained for the period required by Thai law. Security logs are retained for a limited period.
When data is no longer required, we delete it securely or irreversibly anonymize it. You may request earlier deletion as described in Section 10.
10. Your Rights under the PDPA
Subject to the conditions of the PDPA, you have the right to access and obtain a copy of your personal data; to request rectification of inaccurate or incomplete data; and to request erasure of your data.
You also have the right to request restriction of processing; to object to certain processing, including direct marketing; to data portability in a machine-readable format; and to withdraw any consent you have given, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at admin@asapestate.com. We will respond within thirty (30) days. If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
11. Data Security
We apply technical and organizational measures designed to protect your personal data, including encryption of data in transit (SSL/TLS), role-based access controls, and audit logging of access to sensitive data.
Our infrastructure is hosted on reputable providers with recognized security certifications. We review our security practices and dependencies on a regular basis.
In the event of a personal-data breach that is likely to result in a risk to your rights, we will notify the competent authority and, where required, affected individuals without undue delay and in accordance with the PDPA.
12. Children’s Privacy
Our services are not directed to individuals under the age of twenty (20), which is the age of majority under Thai law. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian.
If we become aware that we have collected personal data from a minor without the required consent, we will delete that data promptly.
13. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page in advance of taking effect.
Your continued use of our website and services after the effective date of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this page periodically.
14. Contact and Data Protection
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact ASAP ESTATE CO., LTD.
Email: admin@asapestate.com · Telephone: 082-444-5388 · Website: https://asapestate.com · Address: Bangkok 10160, Thailand.
You may also request deletion of your data at https://asapestate.com/{locale}/data-deletion.
This document is under review by the company’s legal counsel before full enforcement. The provisions below describe our intended practices and may be refined prior to taking final effect.