When you access our website and mobile applications, we automatically collect technical and usage information, including:

• Device Information: Device type, model, operating system and version, unique device identifiers, mobile network information
• Connection Data: IP address, ISP, approximate geolocation based on IP address, time zone settings
• Browser Information: Browser type and version, language preferences, screen resolution
• Usage Data: Pages visited, features used, time spent on pages, navigation paths, search queries
• Interaction Data: Links clicked, buttons pressed, property views, saved searches, favorite listings
• Performance Data: Page load times, errors encountered, crash reports, response times
• Referral Information: Referring URLs, campaign sources, affiliate links
• Cookie Data: Cookie identifiers, tracking pixels, web beacons (see Cookies section below)

Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to collect this data. These help us understand user behavior, improve our services, and deliver personalized experiences.

Control Options: You can manage cookie preferences through your browser settings, though disabling certain cookies may limit website functionality. See our Cookies section for detailed information.

We may receive additional information about you from various third-party sources to enhance our services:

• Social Media Platforms: When you connect your Facebook, Google, or Line accounts, we may receive your profile information, email address, and profile picture
• Analytics Providers: Google Analytics, Facebook Pixel, and other services provide aggregated usage statistics and demographic information
• Marketing Partners: Advertising networks and marketing platforms share campaign performance data and audience insights
• Public Records: Property ownership records, land registry data, public property listings, and real estate databases
• Credit and Verification Services: Identity verification services, credit bureaus (with your consent), background check providers
• Real Estate Partners: Property developers, real estate agencies, and property management companies
• Data Enrichment Services: Companies that provide additional demographic and property data to enhance our listings

Data Combination: We may combine information from different sources to create a more complete profile, improve recommendations, and enhance your experience.

Third-Party Responsibility: We are not responsible for the privacy practices of third-party sources. We recommend reviewing their privacy policies before sharing information with them.

Agents and property owners must verify their identity before publishing listings. This protects renters and buyers from fake listings and fraud. Signing up and browsing never require it.

• What we collect: a photo of the front of your national ID card or passport, and a selfie taken with your camera. We do not collect your national ID number as a separate field. The front of a Thai ID card can also show your religion, which is sensitive personal data under the PDPA; we do not use it, and you may cover that field before taking the photo.
• Why: a Propland administrator compares the face on your ID with your selfie to confirm that the account belongs to a real person. We do not use automated face recognition or build biometric templates. In the app, the selfie step asks you to blink and to turn your head left and right; your phone detects the position of your face and whether your eyes are open, on the device, to check that a real person is in front of the camera. That data is not stored or sent to us, and is not used to identify you; we only record whether the check was completed.
• Legal basis: your explicit consent, given on the verification screen before you submit. You can withdraw consent at any time with the "Withdraw consent and delete my verification photos" button on your profile (web or app); the photos are deleted and you cannot publish new listings until you verify again.
• Who can see it: only Propland administrators, through links that expire after 10 minutes; every view is logged. The photos are never shown on your public profile or to other users.
• How long we keep it: the photos are deleted automatically 90 days after an administrator approves or rejects your request. We keep only the result (verified or rejected), the decision date and, if rejected, the reason. Deleting your account also deletes the photos.

• Sign-in methods: email and password, phone number with a one-time SMS code, Google, Apple, Facebook, or LINE. For phone sign-in your number and the SMS code are processed by Google Firebase Authentication. For LINE we receive your LINE user ID, display name, profile picture and, if you allow it, your email address.
• Phone number matching: if the phone number you verify by SMS is the number an existing Propland account has already verified by SMS for two-step verification, you are signed in to that account and the number is linked to it. We email the account owner when this happens.
• Devices: each device or browser you sign in from is recorded (device type, operating system or browser, first sign-in and last activity) so you can review and sign out devices from your profile. We do not record your location for this.
• Security emails: we email you from noreply@proplandrealtor.com when you sign in from a new device, when a phone number is linked to your account, when your password or two-step verification changes, when your identity verification is rejected, and when your account is deleted. These messages are part of the service and cannot be turned off.

When you report content or block a user, we keep the report (reporter, reported user, reason and an excerpt of the reported content) and the list of users you block, to investigate breaches of the Terms of Use and keep the platform safe. The reported user is not told who reported them. How to report and block is described in the Terms of Use under “User Content, Reporting and Blocking”.

We use your information for the following core service purposes:

• Account Management: Create and manage your account, verify your identity, authenticate login sessions, maintain user profiles
• Service Delivery: Display property listings, process search queries, show personalized recommendations, save favorite properties
• Transaction Processing: Facilitate property inquiries, connect buyers with sellers/agents, process payments, manage bookings and viewings
• Customer Support: Respond to inquiries, resolve technical issues, provide assistance, handle complaints and disputes
• Personalization: Customize your experience based on preferences, show relevant properties, remember your settings, provide location-based content
• Service Improvement: Analyze usage patterns, identify trends, test new features, optimize website performance, fix bugs and errors
• Quality Assurance: Monitor service quality, conduct user research, gather feedback, evaluate satisfaction
• Platform Development: Develop new features, enhance existing functionality, improve user interface and experience

Legal Basis: We process this information based on our contractual obligations to provide services, our legitimate business interests, and your consent where required.

We communicate with you for marketing and informational purposes:

• Marketing Emails: Newsletters featuring new properties, market insights, tips for buyers/sellers, special promotions and offers
• Property Alerts: Notifications about properties matching your saved searches, price changes, new listings in preferred areas
• Service Updates: Announcements about new features, platform improvements, policy changes, maintenance schedules
• Transactional Messages: Account confirmations, password resets, booking confirmations, inquiry responses (these cannot be opted out)
• Surveys and Feedback: Requests for your opinion, satisfaction surveys, product research, beta testing invitations
• Event Invitations: Property viewings, open houses, real estate seminars, webinars, networking events
• Push Notifications: Mobile app alerts, real-time updates, urgent property opportunities (can be controlled in app settings)
• SMS/Text Messages: Appointment reminders, verification codes, urgent notifications (with your explicit consent)

Consent and Control: We only send marketing communications with your consent. You can manage your preferences at any time.

Opt-Out Options: Click unsubscribe in any email, adjust preferences in your account settings, contact us directly, or use app notification settings. Opt-out requests are processed within 10 business days.

We may use your information for legal compliance and platform security:

• Legal Compliance: Comply with applicable laws, regulations, and legal processes, respond to government requests, court orders, and subpoenas
• Policy Enforcement: Enforce our Terms of Use, Privacy Policy, and other agreements, investigate violations, take appropriate action against rule breakers
• Fraud Prevention: Detect and prevent fraudulent listings, fake accounts, payment fraud, identity theft, scams targeting users
• Security Protection: Identify security threats, prevent unauthorized access, protect against cyber attacks, detect malicious activity
• Dispute Resolution: Investigate complaints, mediate disputes between users, maintain records for legal purposes
• Rights Protection: Protect intellectual property rights, defend against legal claims, assert legal rights and defenses
• Safety Measures: Ensure user safety, prevent harassment or abuse, protect vulnerable individuals, maintain platform integrity
• Audit and Compliance: Conduct internal audits, maintain compliance records, prepare regulatory reports

Necessary Processing: This processing is necessary for compliance with legal obligations and our legitimate interests in maintaining a safe, secure platform.

We process personal data on the following legal bases under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA):

• Contract (Section 24(3)): creating and running your account, listings, chat, appointments, rental or sale contracts and the packages you subscribe to
• Legal obligation (Section 24(6)): keeping payment, accounting and tax records, and complying with lawful orders of government authorities
• Legitimate interests (Section 24(5)): account security, preventing fraud and fake listings, reviewing content reports and blocks, analysing app crashes and improving the service — you may object under “Your Rights as a Data Subject”
• Consent (Section 19): marketing communications and access to your device location, which you may withdraw at any time
• Explicit consent (Section 26): ID card and face photos for identity verification before publishing a listing, as described under “Identity Verification”

If you do not provide data that is necessary to perform our contract with you, we may be unable to provide some services, such as publishing listings or subscribing to a package.

When you list a property or make an inquiry, certain information (such as your name and contact details) may be shared with relevant parties, including:

• Property buyers or renters
• Real estate agents
• Property owners

You control what information is included in your public listings and profile.

We may share your information with third-party service providers who perform services on our behalf, including:

• Payment processors
• Cloud storage and hosting providers
• Analytics and data analysis companies
• Marketing and advertising partners
• Customer service and communication platforms

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

We may disclose your information if required by law or in connection with legal proceedings. Additionally, if Propland Realtor is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

In such cases, we will provide notice and ensure that the receiving party agrees to handle your information in accordance with this Privacy Policy.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure data storage and backup systems

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We keep personal data only as long as needed for its purpose:

• Account and profile data, listings and chat messages: for as long as you have an account, deleted when you delete it (messages the other party sent remain in their account)
• ID card and face photos: deleted automatically within 90 days after the review is completed
• Payment evidence, receipts, accounting and tax records: at least 5 years from the transaction, as required by accounting and tax law
• Sign-in and device data: until you sign that device out or delete your account
• Content reports, blocked-user lists and security logs: as long as needed to investigate and prevent abuse, and no longer than the limitation period of related claims
• App crash reports (Firebase Crashlytics): about 90 days, as set by the provider

After these periods we delete, destroy or anonymise the data.

Under the PDPA you have the right to:

• access and obtain a copy of your personal data, and ask us to disclose how we obtained data you did not consent to (Section 30)
• receive your data, or have it transferred, in a machine-readable format (Section 31)
• object to processing based on legitimate interests and to direct marketing (Section 32)
• have your data deleted, destroyed or anonymised (Section 33)
• restrict the use of your data (Section 34)
• have your data corrected so it is accurate, up to date, complete and not misleading (Section 35)
• withdraw consent at any time, without affecting processing carried out before withdrawal (Section 19)
• complain to the Office of the Personal Data Protection Committee (PDPC) if you believe we have not complied with the law (Section 73)

How to exercise your rights: you can edit your profile and delete your account yourself in the app and on the website. For other rights, email info@proplandrealtor.com. We may ask for information to verify your identity, and we will act on your request within 30 days of receiving it. If the law requires us to refuse a request, we will tell you why.

Delete your account yourself: in the app go to Account > Sign-in and Security > Delete Account, or use your Profile page on this website. This deletes your account and personal data, except records the law requires us to keep (such as payment and tax records), which are kept for the legally required period. Deleting your account does not cancel an App Store subscription.

You can control your marketing preferences and cookie settings:

• Email preferences: Unsubscribe from marketing emails using the link in any promotional message
• Cookie settings: Adjust your browser settings to refuse cookies or alert you when cookies are being sent
• Do Not Track: We honor Do Not Track signals where applicable

Note that disabling cookies may affect the functionality of our website.

Cookies are small text files placed on your device when you visit our website. They help us recognize your browser and capture certain information. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired).

Purpose: Cookies enable us to provide essential functionality, improve user experience, analyze site usage, and deliver relevant advertising.

Essential Cookies: Required for website functionality, authentication, security, and basic operations. These cannot be disabled.

Performance Cookies: Collect anonymous data about site usage, page views, error messages, and loading times to help us improve performance.

Functionality Cookies: Remember your preferences (language, location, saved searches) to personalize your experience.

Advertising Cookies: Track your browsing to show relevant property advertisements and measure campaign effectiveness.

Analytics Cookies: Help us understand user behavior through services like Google Analytics, providing insights into popular features and content.

You can control cookies through your browser settings:

• Block all cookies
• Accept only first-party cookies
• Delete existing cookies
• Set cookies to expire when you close your browser

Browser Instructions: Visit your browser's help section for cookie management instructions (Chrome, Firefox, Safari, Edge).

Impact: Disabling cookies may prevent you from using certain features, saving preferences, or accessing your account.

We use third-party analytics services to understand website usage:

• Google Analytics: Tracks user interactions, demographics, and traffic sources. Privacy Policy
• Facebook Pixel: Monitors conversions and user behavior for advertising optimization
• Hotjar: Provides heatmaps and session recordings to improve user experience

You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

In the Propland app: we use Firebase Crashlytics to collect crash reports (device model, OS and app version, and error details) only to fix problems. The app does not track you across other companies’ apps or websites and does not use in-app data for interest-based advertising.

We partner with secure payment processors to handle transactions. We do not store your complete payment card information on our servers.

Payment Partners: Stripe, PayPal, and local payment gateways in Thailand. Each has its own privacy policy and security measures.

PCI Compliance: Our payment processors are PCI DSS compliant, ensuring the highest security standards for card transactions.

In-app purchases on iPhone and iPad: paid through Apple In-App Purchase, with Apple as the payment processor. We receive only transaction details (transaction ID, package, expiry and renewal status) to unlock your account’s benefits. We do not receive card or payment details from Apple.

Our website includes social media features and widgets:

• Share buttons (Facebook, Twitter, Line, WhatsApp)
• Social login options (Facebook Login, Google Sign-In, LINE Login)
• Embedded content from social platforms

Data Collection: These features may collect your IP address, pages visited, and set cookies to enable functionality.

LINE Login and Your Email Address: When you sign in or register with LINE Login, we request access to your LINE profile, including your email address if you grant permission. We use your email address to create and identify your account, deliver payment receipts and invoices, and send you important notifications about your account (such as booking, payment, or contract updates). We do not use it for unsolicited marketing without your separate consent. If you do not grant email access through LINE, we may ask you to provide an email address directly (for example, at checkout) for the same purposes.

Third-Party Policies: Social media interactions are governed by the respective platform's privacy policy.

We work with advertising networks to display relevant property advertisements:

• Google Ads: Remarketing and display advertising across Google's network
• Facebook Ads: Targeted advertising on Facebook and Instagram
• Programmatic Advertising: Real-time bidding platforms for ad placement

Interest-Based Advertising: Ads are tailored based on your browsing behavior and preferences.

Opt-Out: Visit DAA Opt-Out or EDAA Opt-Out to control interest-based advertising.

This applies to the website only. The Propland app shows no ads and shares no data with advertising networks.

We collect and use location information to enhance your property search experience:

• Approximate Location (IP-based): Automatically detected from your IP address to show properties in your general area
• Precise Location (GPS): With your permission, we access device GPS to show nearby properties and calculate distances
• Search Location: Addresses and areas you manually enter for property searches

Permissions: Precise location access requires your explicit consent through device settings. You can revoke this permission anytime.

Benefits: Location services help us provide relevant search results, distance calculations, neighborhood information, and local market insights.

You can control location access:

• Device Settings: Disable location services for Propland Realtor in your phone/tablet settings
• Browser Permissions: Block location requests through browser privacy settings
• Manual Search: Search by entering city names or addresses without sharing your location

Note: Disabling location services won't prevent you from using our platform, but some features may be less personalized.

Age Restriction: Our services are designed for adults (18 years and older). We do not knowingly collect, use, or share personal information from children under 18.

Parental Notice: If we become aware that we have inadvertently collected information from a child without proper parental consent, we will:

• Delete the information immediately from our systems
• Terminate the associated account
• Notify the parent or guardian if contact information is available
• Prevent future access to services by that individual

Reporting: If you believe we have collected information from a child, please contact us immediately at info@proplandrealtor.com with:

• The child's name and age
• The account username or email address
• Your relationship to the child
• Details about how the information was collected

Parental Controls: We encourage parents to monitor their children's online activities and use parental control tools to prevent unauthorized access.

Your data is stored mainly on Google Cloud (Firebase) in Singapore and the Asia region, and may be processed outside Thailand by providers needed to run the service:

• Google LLC (Firebase, Google Sign-In, email delivery) — United States and Singapore
• Apple Inc. (Sign in with Apple, In-App Purchase) — United States
• Meta Platforms, Inc. (Facebook Login and Page connection) — United States
• LY Corporation (LINE Login and LINE Official Account) — Japan
• Opn Payments (Omise) (website payments) — Japan and Thailand

These transfers are made under Sections 28 and 29 of the PDPA — for example, where they are necessary to perform our contract with you, or where the recipient applies appropriate safeguards under its data processing terms. You keep all the rights described in this policy.

Policy Updates: We may update this Privacy Policy periodically to reflect changes in:

• Our privacy practices and data processing activities
• Legal and regulatory requirements
• Technology and security measures
• Business operations and service offerings

Notification Methods: When we make changes, we will notify you through:

• Email Notification: Sent to your registered email address for material changes
• Website Banner: Prominent notice on our homepage for 30 days
• In-App Notification: Alert when you next log into your account
• Dashboard Alert: Message in your user dashboard

Types of Changes:

• Material Changes: Significant changes affecting your rights (30-day notice period before taking effect)
• Minor Updates: Clarifications, contact info, formatting (effective immediately upon posting)

Version History: Previous versions are archived and available upon request.

Effective Date: The "Last Updated" date at the top of this policy indicates when the current version became effective.

Continued Use: Your continued use of our services after changes take effect constitutes acceptance of the updated policy. If you disagree with changes, you may close your account.

Data Controller: Propland Realtor Co., Ltd., 258/418 Thung Wat Don, Sathon, Bangkok 10120

Personal data enquiries and requests:

• Email: info@proplandrealtor.com
• Phone: +(66) 88 952 4197

Request types:

• Access, correction, deletion or a copy of your personal data
• Objecting to or restricting processing, and withdrawing consent
• Opting out of marketing
• Privacy questions or complaints

Response time: we acknowledge requests within 3 business days and complete them within 30 days of receipt.

If you are not satisfied with our response, you may complain to the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th.