Every item marked like this has to be replaced with Siam Property's real details, and the finished text should be checked by a Thai lawyer. The wording below is a working draft prepared to cover the Thai PDPA and the European GDPR; it is not legal advice.
Effective date: 26 July 2026 · Version: 1.0
This website, siamproperty.info (the "Website"), is operated by Siam Property Development & Sale Co., Ltd., a company incorporated in Thailand on 7 May 2025 under registration number 0335568000546, registered office 734 Village No. 14, Nong Ya Lat Subdistrict, Kantharalak District, Sisaket Province 33110, Thailand, operating in Hua Hin, Prachuap Khiri Khan ("Siam Property", "we", "us").
For the purposes of the Thai Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where it applies, the EU and UK General Data Protection Regulation ("GDPR"), we are the data controller of the personal data described in this policy.
Questions about this policy or about your personal data: contact@siamproperty.info, or by post to the address above. Our data protection contact is the company director, Ms. Kanokorn Sungsut.
This policy applies to everyone who visits the Website or contacts us through it, wherever they live. It is written to satisfy the Thai PDPA, and it also gives visitors in the European Economic Area, the United Kingdom and Switzerland the information and the rights the GDPR requires. Section 11 adds the specific disclosures required for residents of California and certain other US states.
When you send an enquiry through the booking form on the Website we collect:
If you then contact us by phone, WhatsApp or email, we also hold what you tell us in that correspondence.
We do not ask for and do not want financial details, identity document numbers, or any of the special categories of data listed in section 26 of the PDPA and Article 9 GDPR (health, religion, biometrics, political opinions and so on). Please do not send them through the contact form. Documents needed for an actual property transaction are handled separately, under a written agreement.
| Purpose | Legal basis (GDPR) | Legal basis (PDPA) |
|---|---|---|
| Answering your enquiry, arranging and confirming a viewing | Art. 6(1)(b) — steps at your request before entering into a contract | s. 24(3) — necessary for performance of, or steps prior to, a contract |
| Sending you plans, price breakdowns and information you asked for | Art. 6(1)(b) / 6(1)(a) consent | s. 24(3) / s. 19 consent |
| Keeping records of enquiries and of the properties discussed | Art. 6(1)(f) — our legitimate interest in running and evidencing our business | s. 24(5) — legitimate interest |
| Keeping the Website secure and working | Art. 6(1)(f) — legitimate interest in security | s. 24(5) — legitimate interest |
| Understanding how the website is used (analytics), only if you accept | Art. 6(1)(a) — consent | s. 19 — consent |
| Marketing emails about other properties (only if you ask for them) | Art. 6(1)(a) — consent | s. 19 — consent |
| Meeting accounting, tax and anti-money-laundering obligations once a transaction begins | Art. 6(1)(c) — legal obligation | s. 24(6) — legal obligation |
Where we rely on consent you can withdraw it at any time (section 9). Withdrawing consent does not affect anything we did before you withdrew it, and does not affect processing that rests on another basis.
We do not add enquirers to a marketing list automatically. If you ask us to keep you informed about new properties, every message we send will contain a one-click unsubscribe link, and you can also unsubscribe by replying to any message or writing to contact@siamproperty.info.
We do not sell, rent or trade personal data. We share it only with:
Siam Property is established in Thailand. If you contact us from the EEA, the UK or Switzerland, your enquiry data is transferred to and stored in Thailand and hosted on our provider's servers in Malaysia. If you accept analytics, aggregated usage data also goes to Google, which may process it in the United States. Thailand and Malaysia have not received an adequacy decision from the European Commission.
For those transfers we rely on:
You can ask us for a copy of the safeguards we use by writing to contact@siamproperty.info. Transfers out of Thailand, where they happen, follow sections 28 and 29 of the PDPA.
Wherever you live, you can ask us to:
To exercise any of these, email contact@siamproperty.info. We answer within 30 days as required by the PDPA, and within one month as required by the GDPR. There is no charge unless a request is manifestly unfounded or excessive. We may ask you for enough information to be sure the request really comes from you.
Please tell us first — we would rather fix the problem. You can also complain to a regulator:
If you live in California, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and why, to obtain a copy of it, to correct it, to have it deleted, and not to be discriminated against for exercising those rights. Comparable rights exist in Virginia, Colorado, Connecticut, Utah and other states.
The categories we collect are set out in section 3: identifiers (name, email, IP address) and your own written enquiry. We collect them for the business purposes in section 4. We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CPRA, and we have not done so in the preceding twelve months. We do not knowingly collect the personal information of anyone under 16. To exercise any of these rights, or to have an authorised agent do so for you, write to contact@siamproperty.info.
The Website is meant for adults. We do not knowingly collect data from anyone under 20 (the age of majority in Thailand) without the consent of a parent or guardian, and we do not knowingly collect data from anyone under 16 in the EEA or the UK. If you believe a child has sent us personal data, write to us and we will delete it.
The Website is served over HTTPS. Enquiries are delivered to a mailbox that only the people who need to answer them can open. We keep the software the site runs on up to date and limit access to enquiry data to the staff who deal with clients. No system is perfectly secure; if a breach ever affects your rights we will notify you and the regulator within the deadlines the PDPA and the GDPR set (72 hours to the supervisory authority under the GDPR).
See the separate Cookie Policy for what is stored in your browser and how to change your choice.
If we change this policy we will post the new version here with a new effective date. If the change is significant we will say so on the home page for a reasonable period.