Privacy Policy

1. Introduction

Suriya Haus takes the privacy of its clients and website visitors seriously. We handle personal information with discretion, collect only what is necessary for service delivery, and do not share it with third parties without your consent or a lawful basis for doing so.

Thailand's Personal Data Protection Act B.E. 2562 (PDPA) governs the processing of personal data in connection with our services. This policy is written in alignment with those obligations. Where we serve clients from jurisdictions with their own data protection frameworks, we endeavour to meet those standards as well.

2. Personal Data We Collect

We collect personal data through the following means:

• Contact forms — name, email address, phone number (optional), and any information you include in your message.
• Service engagements — additional details provided during consultations or service delivery, including residential preferences, budget parameters, and correspondence.
• Cookies and analytics — technical data collected automatically when you visit our website (see Section 5).

Legal basis for processing

• Consent — where you have given explicit consent (e.g. submitting a contact form)
• Contract performance — where processing is necessary to deliver a service you have engaged us for
• Legitimate interests — for business communications and service improvement, where this does not override your rights

Retention

Contact enquiries: retained for 12 months or until resolved, whichever is sooner. Active client records: retained for the duration of the engagement plus 3 years. Financial records: retained for 7 years as required by Thai tax law.

3. How We Use Personal Data

• Responding to enquiries and providing the services you have requested
• Preparing curated property shortlists tailored to your stated requirements
• Coordinating viewing logistics, tenancy paperwork, and professional introductions
• Internal record-keeping and quality assurance
• Sending service-related communications relevant to your engagement
• Improving our website and service delivery (via anonymised analytics data)

Marketing: We do not send marketing communications unless you have explicitly opted in. You may withdraw that consent at any time by writing to [email protected].

Third-party sharing: We do not sell personal data. We may share it with independent professionals (e.g. lawyers, relocation consultants) where you have instructed us to make an introduction, and with service providers who process data on our behalf under appropriate data processing agreements (e.g. web hosting, email delivery). We do not share your financial position or identity with landlords or property agents without your explicit instruction.

4. Data Protection Measures

• All data transmitted via our website is encrypted using TLS/SSL protocols
• Access to client records is restricted to authorised Suriya Haus staff only
• Internal systems are protected by access controls and reviewed regularly
• In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within the timeframes required by applicable law
• We conduct periodic reviews of our data handling practices and update them as needed

5. Cookies

Our website uses cookies to understand how visitors use it and to improve the experience. We use the following categories:

• Essential cookies — required for the website to function correctly. Cannot be disabled.
• Analytics cookies — help us understand how pages are used. Optional.
• Preference cookies — remember your settings across visits. Optional.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Thailand's PDPA and applicable international frameworks, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no lawful basis for retaining it
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
• Complaint — lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) or the relevant authority in your jurisdiction

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently done so, we will delete that data promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services following a material change constitutes acceptance of the revised policy. For significant changes, we will notify active clients directly where we hold their contact details.

10. Contact for Privacy Matters

For questions about this policy or to exercise your rights, contact us at: