Privacy Policy

This Privacy Policy explains how Phuket Brokers ("we", "us", "our") collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand and any subordinate regulations issued thereunder.

By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy.

1. Data Controller

Phuket Brokers
Property & Business Agents
Phuket, Thailand
Email: info@phuketbrokers.com

We are the data controller responsible for the personal data you provide through this website.

2. Personal Data We Collect

We collect only the personal data that is necessary for the purposes described below:

  • Enquiry and contact data: name, email address, telephone number, and the content of your message, when you submit a property enquiry or contact form.
  • Technical data: IP address, browser type and version, operating system, and pages visited, collected automatically by our web server for security and performance purposes.
  • Authentication data (admin users only): email address, hashed login tokens, request IP address, and user agent, used solely to authenticate authorised administrators.

We do not collect sensitive personal data as defined under Section 26 of the PDPA (such as health data, racial or ethnic origin, or financial account details).

3. How We Use Your Personal Data

PurposeLawful Basis (PDPA)
Responding to property enquiries and requests for informationConsent (Section 19) — provided when you submit a contact form
Following up on your enquiry with relevant property informationConsent
Operating and securing the websiteLegitimate interest (Section 24(5)) — ensuring site integrity and preventing fraud
Authenticating administrator accountsContract / Legitimate interest — necessary for business operations
Complying with legal obligationsLegal obligation (Section 24(6))

4. Cookies and Local Storage

Our website uses a minimal number of cookies and browser local storage:

  • pb_consent (cookie): Stores your cookie consent preference. Strictly necessary. Expires after 1 year.
  • pb_token (cookie): A secure authentication token for administrator users only. It is set only after a verified login and is never accessible to JavaScript. Strictly necessary for admin functionality. Expires after 7 days or on logout.
  • pb_shortlist (local storage): Stores property slugs you have saved to your personal shortlist. This data remains on your device only and is never transmitted to our servers.

We do not use advertising, analytics, or tracking cookies. No third-party cookies are set by our website.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share it in the following limited circumstances:

  • Service providers: Our web hosting provider and email delivery service may process your data as data processors on our behalf, under binding data processing agreements. They are permitted to use your data only as instructed by us.
  • Our agents: When you enquire about a specific property, the responsible agent at Phuket Brokers will receive your enquiry details in order to respond to you.
  • Legal requirements: We may disclose personal data if required to do so by Thai law, court order, or lawful request from a competent authority.

We do not transfer personal data outside of Thailand except where required by law or where our cloud service providers operate data centres internationally, in which case we ensure appropriate safeguards are in place.

6. Data Retention

  • Enquiry submissions: Retained for up to 2 years from the date of receipt, then securely deleted unless a continuing business relationship requires longer retention.
  • Login tokens (admin): Invalidated immediately on use (single-use) and purged from our database after 30 days.
  • Server logs: Retained for up to 90 days for security and operational purposes.

7. Your Rights Under the PDPA

As a data subject under the PDPA, you have the following rights:

  • Right to be informed — to be told how your data is used (this policy fulfils that obligation).
  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to request correction of inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data where there is no overriding legal basis for us to retain it.
  • Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
  • Right to data portability — to receive your data in a structured, commonly-used format where technically feasible.
  • Right to object — to object to processing carried out on the basis of legitimate interests.
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us by email at info@phuketbrokers.com with the subject line "PDPA Data Request". We will respond within 30 days in accordance with Section 41 of the PDPA.

8. Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC), the Thai supervisory authority for data protection matters:

Personal Data Protection Committee
Office of the National Broadcasting and Telecommunications Commission
Bangkok, Thailand
Website: www.pdpc.or.th

We would, however, appreciate the opportunity to address your concerns before you approach the PDPC, so please contact us first.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted HTTPS connections, secure httpOnly cookies for authentication, rate-limited login flows, and regular security reviews.

No method of transmission over the internet is completely secure. If you believe your data has been compromised, please notify us immediately at info@phuketbrokers.com.

10. Links to Third-Party Websites

Our website may contain links to third-party websites (for example, property portals or legal information resources). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The updated policy will be published on this page with a revised effective date. Where changes are material, we will take reasonable steps to notify users.

12. Contact Us

For any questions about this policy or to exercise your rights, please contact:

Phuket Brokers
Email: info@phuketbrokers.com
Phuket, Thailand

Effective date: 1 June 2025. This policy is governed by the laws of the Kingdom of Thailand.