Privacy Policy

ASAP ESTATE CO., LTD. (บริษัท อะทรัพย์ เอสเตท จำกัด) ("Company", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://asapestate.com) and use our services.

บริษัทดำเนินการตาม พ.ร.บ. คุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562 (Thailand Personal Data Protection Act — PDPA) อย่างเคร่งครัด

Registration No.: 0105568170109
Location: กรุงเทพมหานคร 10160, ประเทศไทย

• To respond to your inquiries and provide requested services
• To match you with properties that meet your requirements
• To process and facilitate real estate transactions
• To send property recommendations relevant to your interests (with your consent)
• To improve our website, services, and AI-powered tools
• To comply with applicable laws and regulations
• To detect and prevent fraud, unauthorized access, or security threats

We will never use your personal data for purposes beyond what is described in this policy without obtaining your prior consent.

• Consent: When you voluntarily provide your information through our forms or services
• Contractual necessity: When processing is required to fulfill a brokerage agreement or service contract
• Legal obligation: When required by Thai law (e.g., Anti-Money Laundering Act, Revenue Code)
• Legitimate interest: For fraud prevention, security, and service improvement (balanced against your rights)

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• As required by law, court order, or government authority
• With trusted service providers operating on our behalf under Data Processing Agreements: Supabase (database), Google (analytics), Vercel (hosting), Cloudinary (media storage)
• With co-brokerage partners — only when you agree to receive property recommendations from partners, and only the minimum necessary information is shared
• With financial institutions — only when you request mortgage/loan consultation, and only with your explicit consent

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

• Contact information: Retained for the duration of our business relationship, or up to 3 years after your last interaction
• Transaction records: Retained for 10 years as required by Thai law (Revenue Code, Civil and Commercial Code)
• Chat/inquiry logs: Session-based, automatically purged after 90 days
• Analytics data: Anonymized, retained for 14 months (Google Analytics default)

You may request early deletion of your data at any time (see Section 8 — Your Rights).

Under the Thailand Personal Data Protection Act (PDPA), you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restriction: Request that we limit processing of your data
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interest or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: ariyahc@asapestate.com or call 082-444-5388. We will respond within 30 days of receiving your request.

• SSL/TLS encryption for all data transmission
• Database hosted on Supabase (SOC 2 Type II certified infrastructure)
• Role-Based Access Control (RBAC) — staff access limited by role
• Audit trail for all access to sensitive data
• Regular security reviews and dependency updates

In the event of a data breach, we will notify the relevant authorities and affected individuals within 72 hours as required by PDPA.

Our services are not directed at individuals under the age of 20 (age of majority under Thai law). We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor without parental consent, we will delete it promptly.

Your data may be processed on servers located outside Thailand (United States, Singapore) through our service providers (Supabase, Vercel, Google, Cloudinary). All providers maintain appropriate data protection standards and contractual safeguards compliant with PDPA requirements for cross-border transfers.

We may update this Privacy Policy from time to time. Material changes will be announced on our website at least 30 days before taking effect. Continued use of our website after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: ariyahc@asapestate.com
• Phone: 082-444-5388
• Location: กรุงเทพมหานคร 10160, ประเทศไทย
• Website: https://asapestate.com/contact

This Privacy Policy is governed by the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019). Any disputes shall be subject to the jurisdiction of Thai courts.