How THAIVIA handles your information.

This notice explains how THAIVIA collects, uses, stores, shares and deletes personal information, and the choices and rights you have over it. It covers property searches, listing pages, saved properties, enquiry and contact forms, property requirements, the matched suggestions, partner accounts and the partner dashboard.

It applies to everyone who uses THAIVIA: visitors browsing anonymously, members with an account, and the developers, agents and property owners who publish or claim listings.

Our terms and conditions and our cookie notice form part of this notice and should be read with it. Where this notice refers to another page, the link is given so you can read it in full.

THAIVIA is the property portal owned and developed by PropertyStore Thailand. PropertyStore Thailand is the data controller for the information described in this notice: it decides why the information is collected and how it is used.

Base44 provides the hosting, sign-in and data services the portal runs on. Base44 processes information on our behalf, as a service provider, and does not use it for its own property-marketing purposes.

Our registered company details and a dedicated privacy contact address will be published in the contact section of this notice as part of the public launch. Until then, requests can be made through the portal’s contact page, as set out in Part F.

We handle personal information in line with the Personal Data Protection Act B.E. 2562 (2019) of Thailand, known as the PDPA, together with other laws that apply to us, including the Consumer Protection Act and the Computer Crime Act.

The PDPA gives you specific rights over your personal information. Those rights are described in Part F. If you are outside Thailand, the law of the country you are in may give you additional or similar rights, and we will honour reasonable requests made under it.

• Minimal by default: we ask for the details a feature actually needs, and nothing more.
• Private by default: enquiry and lead information is never published on the portal, and is never sold or resold in any form.
• Purpose-bound: if you send an enquiry, your details are used to answer that enquiry, not as an opening for other marketing.
• Accountable: we keep records of how information is handled, and we tell you what we changed and when, through the version at the top of this page.

Account information: your email address, a password (stored by the sign-in service in a protected form that we cannot read), your name, and an optional profile photo. Email verification and password recovery messages are genuine transactional messages.

• Enquiry information: your name, email address, optional phone number, preferred contact method, your message, and any preferred viewing date you enter. A listing enquiry also records the THAIVIA reference, title and location of the property you asked about.
• Property requirement information: whether you are buying or renting, the destination and property type you selected, your budget and bedroom preferences, and any notes you add.
• Owner and partner information: the organisation you represent, whether you are a developer, agent or property owner, contact details for the person managing the account, and the reference of any listing you claim.
• Anything you type into a free-text field, including the message on an enquiry or a correction request.

An account cannot be created until the terms and the privacy notice are accepted. When an account is created with an email address and password, that acceptance is recorded against the account together with the versions of the notices in force at the time, so that we can show which notice applied.

• Saved properties: the listings you bookmark, held against your account.
• Matched suggestions: the properties suggested to you and the notes generated with them.
• Enquiry history: the enquiries you have sent, and their status in our records.
• Usage counts: statistics of how the portal is used, such as how many searches were run, how many enquiries were submitted and which property pages were opened. They measure whether the portal is useful, and are not used to build an advertising profile.
• Cookie choice: the choice you saved about storage on your device, kept in your browser rather than in your account.
• Technical and security information: the basic data any web service records to run securely, such as request times, page addresses, error reports and the address your device connects from. We use this to keep the portal working, to prevent abuse and to fix faults, not to build an advertising profile.

The portal collects no payment card details, bank account details, passport or national ID numbers, title deeds, or health information.

Please do not send sensitive information through an enquiry, including your ID documents, financial statements, medical information, or details about your religion, politics or union membership. If you need to share documents with a developer or agent, do that with them directly once you have decided to deal with them, and not through a public form.

If you send us sensitive information by mistake, tell us: we will delete it from the enquiry record and confirm that we have done so.

Under the PDPA, we need a lawful basis for each use. Ours are:

• Consent: for the things you actively choose, such as submitting an enquiry, saving properties, or asking us to pass your details to the developer or agent shown on a listing.
• Contract, or steps towards it: to create and run your account, provide the features you ask for, and manage partner listings and leads.
• Legitimate interests: to keep the portal secure, to prevent fraud and abuse, to fix faults, to understand at an aggregate level how the portal is used, and to handle complaints and disputes. We weigh these against your rights and interests, and you can object to this use.
• Legal obligation: to keep records where the law requires it, and to respond to a lawful request from an authority.

Where we rely on consent you can withdraw it at any time, as explained in Part F. Withdrawing consent does not affect anything done before you withdrew it, and it may mean we can no longer provide a feature that depends on it.

When you send an enquiry about a listing, we record: your name, your email address, your phone number if you chose to give one, your preferred way of being contacted, your message, any preferred viewing date, and which property you asked about (its THAIVIA reference, title and location).

A general message through the contact page, a request to list a property, or a partnership enquiry is recorded in the same way, without a property attached. A property requirement form records what you are looking for instead of a message about one specific property.

We ask only for what is needed to answer you. You never have to give a phone number, and we do not require an account to send an enquiry on a listing.

An enquiry is personal information, and access is restricted by design. Nobody browsing the portal can see it, it does not appear on any page, and it is not shared with other users.

• THAIVIA administrators can read enquiries in the portal’s private records. This is limited to the people who operate the portal, and is used for answering you, for support, for quality control and for handling a dispute or a suspected abuse of the forms.
• The developer or agent shown on the listing you enquired about sees the enquiry in their partner dashboard, and only for listings recorded against their own account. They cannot see enquiries for any other listing, or any other partner’s leads.
• During the current private testing period, enquiries are stored as test records, no external message is sent, and access is limited to administrators. Delivery of enquiries to listing owners is being completed before the portal opens publicly.
• No buyer, renter or other member can see any enquiry. Partners do not see each other’s leads, and we do not provide a directory of enquirers to anyone.

Partners who receive lead information are required by our terms to use it only to answer that enquiry, to keep it confidential and secure, not to add you to any marketing list, and not to pass it to anyone else.

• We do not sell, rent, trade or resell enquiry information or any lead data to any party, in whole or in part.
• We do not pass your details to businesses unrelated to the property you asked about, and we do not operate a shared lead pool, a lead auction or a call centre list.
• We do not use enquiry information for our own marketing messages, newsletters or advertising, and we do not use it to build advertising audiences.
• We do not publish, quote or display your name, contact details or message anywhere on the portal, in search results or in marketing.
• We do not use enquiry information to train advertising models or to profile you for unrelated commercial purposes.

If this ever changes, it will only change with a clear, separate choice from you, and this notice will be updated first.

• Record-level access rules: each enquiry record can be read only by THAIVIA administrators and by the partner account that manages the listing it belongs to. Every request for lead information is scoped to the listings that account owns, so one partner cannot reach another partner’s data even by changing a link or an identifier.
• Authenticated access: the partner dashboard and every account page sit behind sign-in, with email verification and password recovery handled by the platform’s authentication service.
• Encrypted in transit: the portal is served over HTTPS, so the details you type are encrypted between your device and the service.
• Least privilege: only the people who need to work with enquiries can open them, and access is limited to the support, quality and administrative tasks described above.
• Not public: enquiry and lead information is never written to a public page, an image address or a public file.
• Kept to a purpose: enquiry records are held for the periods in the next section, then deleted or anonymised.

No online service can promise perfect security. What we can promise is that we keep the amount of personal information we hold small, restrict who can reach it, and act quickly if something goes wrong.

We keep personal information only as long as we need it for the purpose it was collected for, or for as long as the law requires. Our launch periods are:

• Property, viewing and contact enquiries: 24 months from the last activity on the enquiry, then deleted or anonymised.
• Property requirement submissions: 24 months from submission, or from your last update to it if that is later.
• Owner, partner-interest and listing-claim requests: 24 months from the request.
• Account profile and saved properties: while your account stays open.
• After you close your account: your account and its content are removed within 30 days, except information we must keep for a legal obligation, an active dispute, or to prevent fraud, which is kept only for as long as that purpose needs and no longer than 24 months.
• Records created during the private testing period: deleted before the portal opens publicly.
• Aggregated statistics that do not identify anyone, such as how many enquiries a listing received in a month: kept without a time limit.
• Routine platform backups: overwritten within 60 days.

When a retention period ends we delete the record or anonymise it, so that it no longer relates to you.

• The developer or agent shown on the listing is the party who answers you. They are responsible for their own response, their conduct and anything they offer you.
• We are not a party to your enquiry, and we do not negotiate, price, reserve or handle any money on your behalf. We never ask you for a deposit or a reservation payment.
• Your details go to that party because you asked about their property. If you would rather not share your contact details with them, do not send the enquiry, and browse the listing instead.
• We may review an enquiry if you ask us to help, or if we are checking the quality of the forms or investigating abuse. Enquiries are not used for anything else.

The “Matched for you” suggestions are produced automatically from the requirements, saved properties and enquiries connected to your account. They are made to save you browsing time.

Those suggestions are indicative: they can be incomplete or out of date, they are not a valuation, a recommendation or advice, and they do not rank or filter anyone’s access to property. No automated process on the portal makes a decision that has a legal effect on you, and no automated process decides whether a partner may contact you.

You can ask us how a suggestion was produced, ask for a person to review it, or stop the feature entirely. Deleting your requirements, your saved properties or your account stops the suggestions being generated.

We do not have a marketing partner programme that receives your information. The parties who process it for us are the services that run the portal: Base44, which provides hosting, authentication, storage and AI services, and any infrastructure or email provider used to operate those services.

A service provider may only process personal information on our instructions, for the purposes in this notice, and under a contract that requires confidentiality and appropriate security. Where a service provider acts as our processor, it may not use your information for its own purposes, including marketing to you.

The contact form, enquiry forms, requirement forms and partner dashboard are the only places personal information is collected, and the enquiry records are the only place lead information is stored.

The portal and its records are hosted on cloud infrastructure operated by Base44 and its providers, which may store or process information on servers outside Thailand. That can mean your information is transferred across a border.

Where information is transferred out of Thailand, we rely on appropriate safeguards, such as contractual protections and the security measures described in Part C, and we take reasonable steps to make sure it stays protected to the standard the PDPA requires.

You can ask us for more detail about where your information is held, and we will explain what we can. Base44’s own account, editor and platform services have their own privacy arrangements, which govern that relationship.

• Legal requirements: where we are required to disclose information by law, a court order, or a lawful request from a competent Thai or foreign authority, or where disclosure is necessary to establish, exercise or defend a legal claim.
• Safety and abuse: where disclosure is needed to detect, prevent or address fraud, a security incident, or an illegal act, or to protect the rights, property or safety of any person.
• A property correction or removal request: where a listing or its attribution is disputed, we may share the relevant details with the owner, agent or developer concerned so the matter can be resolved.
• A change in our business: if the portal or the company is reorganised, sold or transferred, information may be part of what transfers. The new operator would be bound by this notice for information already collected, and we would tell you before that changed.

• Access control on every record type, so that saved properties are visible only to your account, enquiries only to administrators and the partner managing that listing, and listing management only to the account entitled to it.
• Sign-in through the platform’s authentication service, with email verification and password recovery, so that access to an account requires control of the email address it is registered to.
• Data minimisation: we do not collect payment, identity document or health data, so there is nothing of that kind to lose.
• Transport encryption: the portal is served over HTTPS.
• Monitoring and fixing: faults and unusual form activity are reviewed, and forms include basic abuse controls.

If a personal data breach occurs, we will assess it promptly and take steps to contain it and reduce the harm. Where a breach is likely to result in a risk to your rights and freedoms, we will notify you and the Office of the Personal Data Protection Committee as required by the PDPA, and we will tell you what happened, what information was involved and what you can do.

If you believe your information has been exposed or misused, contact us straight away so we can investigate.

• Keep your password and any verification code private, and do not share your account.
• Use an email address you control, and keep it current, since it is how we reach you about your account.
• If you think someone else has used your account, change your password and tell us.
• If you are sent a message asking for money, a deposit or payment on behalf of THAIVIA, treat it as fraudulent: we never ask for payment through the portal or by message.

Under the PDPA you can:

• Access and be told: ask whether we hold personal information about you, and receive a copy of it with an explanation of how it has been used.
• Correct: have inaccurate or incomplete information corrected or completed.
• Delete: ask us to delete or anonymise your information where we no longer need it, where you withdraw consent, or where it was collected unlawfully.
• Restrict: ask us to limit the use of your information while a question about it is being resolved.
• Object: object to processing we base on legitimate interests, and object to any processing for direct marketing at any time.
• Withdraw consent: withdraw a consent you gave, such as the choice to send an enquiry or save a property, without affecting anything done before.
• Portability: ask for your information in a structured, commonly used, machine-readable form, and ask us to send it to another controller where technically feasible.
• Complain: lodge a complaint with the Office of the Personal Data Protection Committee if you believe we have handled your information unlawfully.

If we are required to appoint a data protection officer, their details will be published in this section before the portal opens publicly.

Send your request through the portal’s contact page, and say which right you are using and what you would like us to do. If you have an account, you can also delete it yourself from your account page, and your data will be handled as described above.

We will ask you to confirm your identity and the email address or account a record relates to, so that we do not give personal information to the wrong person. We may ask for a little more detail about a request to make sure we act on the right records.

We will respond within 30 days of confirming your request. If a request is complex or we have many to handle at once, we will tell you why and give you a realistic date. There is no charge for a normal request, though we may charge a reasonable fee for a request that is manifestly unfounded, excessive or repeat, and we will explain that first.

You can delete your account from the account page while signed in. That removes your profile, your saved properties and your requirements, and stops the matched suggestions being generated.

Enquiries you have already sent are held by the party who received them and by us in our records, and are removed under the retention periods in Part C. You can ask us to remove them sooner, and we will unless we have to keep them for a legal obligation or an active dispute.

Our cookie notice explains the essential storage used to run the portal and to remember your choice, and the controls you have. We also keep aggregate counts of how the portal is used, such as searches run, enquiries submitted and property pages opened; those counts record no name, email address or message, and are not used for advertising. You can reopen your cookie settings at any time from the footer of every page.

• We send transactional messages needed to run your account, such as email verification and password recovery. No marketing messages, property alerts or newsletters are configured today. If we introduce them, they will be opt-in, and every message will carry a way to stop them.
• THAIVIA is for adults. You must be 18 or over to use the portal, send an enquiry or hold an account, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will remove it.

This is version 1.0, the version prepared for the public launch of the portal. The version and date at the top of this page always show the notice currently in force.

We will update this notice when the portal, our practices or the law change, and we will publish the new version with a new date. Where a change materially affects how your enquiry information or your account information is handled, we will take reasonable steps to bring it to your attention, such as a notice on the portal or a message to account holders, before it takes effect.

Nothing in this notice limits your rights under the PDPA.

For any question about this notice, any request about your information, or any concern about how it has been handled, use the contact page. Please include enough detail for us to find the records you mean, such as the listing reference if your question is about an enquiry.

A dedicated privacy contact address, and the registered company details and address of PropertyStore Thailand, will be published in this section as part of the public launch. Until then, the contact page is the working route for every request under this notice.

If you are not satisfied with our response, you can complain to the Office of the Personal Data Protection Committee of Thailand. We would prefer the chance to put a problem right first, so please raise it with us as well.