Legal & privacy
Privacy Policy & PDPA Privacy Notice
Last updated: 12 August 2026
Pattaya Realty respects your privacy and is committed to handling personal data lawfully, fairly, transparently and securely. This notice explains how we collect, use, disclose, retain and protect personal data when you use our website, contact us, enquire about property, list a property, request a viewing or otherwise deal with us.
1. Who controls your personal data
Pattaya Realty is the data controller for personal data processed through this website and our real-estate services, unless we expressly tell you otherwise.
Business address: 519/183 Moo 6, Soi Siam Country Club, Nongprue, Bang Lamung, Chon Buri 20150, Thailand.
Privacy contact: use our contact form and mark the message “Privacy / PDPA”.
2. Personal data we may collect
Depending on how you interact with us, we may collect your name, email address, telephone number, LINE or WhatsApp details, preferred contact method, property requirements, budget, timeframe, property reference, enquiry content, property ownership or listing details you provide, viewing preferences, transaction-related correspondence and records of communications.
We may also collect technical data such as IP address, browser or device information, referring page, pages viewed, timestamps and cookie or analytics identifiers where permitted and, for optional analytics, only after consent.
Please do not send Thai national ID numbers, passport copies, bank details, health information or other sensitive information through general website forms unless we specifically request it through an appropriate secure process.
3. Why we process personal data and our legal bases
We process personal data only where we have a lawful basis under applicable Thai law. Depending on the circumstances, this may include processing necessary to respond to your request or take steps before entering into a contract, performing a contract, complying with legal obligations, pursuing legitimate interests that do not override your rights, protecting vital interests where applicable, or processing based on your consent.
Typical purposes include responding to property enquiries, arranging viewings, matching buyers or tenants with properties, assisting owners and developers, administering listings, maintaining CRM records, preventing fraud or misuse, securing our systems, handling complaints, maintaining business records, and improving our services.
Direct marketing is optional. Where consent is required, we use it as the legal basis and you may withdraw it at any time without affecting processing that was lawful before withdrawal.
4. Marketing communications
We do not make marketing consent a condition of sending a property enquiry. If you opt in, we may send relevant listings, property alerts, market updates or similar marketing. You can unsubscribe using the method provided in a message or by contacting us.
Withdrawing marketing consent does not prevent us from contacting you about an active enquiry, requested viewing, property listing, transaction, service issue or other non-marketing matter.
5. Cookies and analytics
We use necessary browser storage for essential website functions and privacy preferences. Optional analytics are disabled until you actively accept them through our cookie banner. If you choose necessary-only, Google Analytics is not intentionally activated by our consent manager.
You can change your choice at any time using “Cookie settings” in the website footer. For details, see our Cookie Policy.
6. Who we may share data with
We may share relevant personal data with personnel and service providers who need it to operate our business, including CRM, website hosting, communications, analytics, email or messaging providers, and professional advisers. We may also share relevant enquiry details with property owners, developers, landlords, tenants, buyers, sellers, co-agents or other transaction participants where reasonably necessary to deal with your request.
We do not sell personal data as a standalone commercial product. Service providers are expected to process personal data only for legitimate purposes and with appropriate confidentiality and security safeguards.
7. International transfers
Some technology or communications providers may process data outside Thailand. Where personal data is transferred internationally, we take reasonable steps to use a lawful transfer mechanism and appropriate safeguards required by applicable Thai data-protection law.
8. Data retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, to manage our relationship with you, to maintain appropriate transaction and accounting records, to resolve disputes, and to comply with legal, tax, regulatory or evidential requirements.
Retention periods vary by record type. When data is no longer required, we aim to delete, anonymise or securely dispose of it, subject to legitimate legal and operational requirements.
9. Security
We use administrative, technical and organisational safeguards proportionate to the nature of the data and risks involved. No internet service can guarantee absolute security, but we aim to restrict access, minimise data collection, use secure systems and providers, monitor for misuse, and respond appropriately to suspected personal-data breaches.
Where Thai law requires notification of a personal-data breach, we will follow the applicable notification and risk-assessment requirements.
10. Your rights under Thailand’s PDPA
Subject to the conditions, limitations and exceptions in law, you may have rights to request access to and a copy of your personal data; request correction of inaccurate data; request deletion, destruction or anonymisation; request restriction of processing; object to certain processing; request data portability where applicable; withdraw consent; and lodge a complaint with the competent Personal Data Protection authority.
We may need to verify your identity before acting on a request. We may also refuse or limit a request where permitted or required by law, and will explain the basis where appropriate.
11. Children
Our property services are not directed at children. If a minor’s personal data is involved, we will handle consent and authorisation requirements in accordance with applicable Thai law and the circumstances of the service.
12. Third-party websites and services
Our website may link to third-party websites, maps, messaging platforms or property resources. Their privacy practices are controlled by those third parties. Review their notices before providing personal data directly to them.
13. Changes to this policy
We may update this notice to reflect changes in law, technology or our processing. The current version will be posted here with its effective date. Material changes may also be communicated through appropriate channels.
14. Contact and complaints
For privacy questions, requests or complaints, use our contact form and state “Privacy / PDPA”. We will assess and respond in accordance with applicable law.