shield_person Privacy policy

1. What we collect

• · Your account — the name you choose, your email, your password (stored as a hash that cannot be read back as the real password), your phone number and LINE ID if you enter them, and your role (buyer / lister / moderator)
• · Agent details (if you enter them) — your company/affiliation and licence/registration number. These two fields appear publicly on your listing page, unlike your phone number and LINE ID, which the system never discloses on its own
• · The property you list — price, location, size, condition, photos, and the history of every edit
• · Messages and appointments — what you write to the other party in the system, the date and time of viewings, and the outcome afterwards
• · Your buyer brief — your budget, the areas you are interested in, and the destinations you specify
• · Listings you saved (the heart button) — visible only to you. The seller sees only the number of people who saved their listing, never who they are
• · The change log — every time information visible to others is changed, the system records who changed it, what changed and when, together with the IP address and the page the action came from
• · Lister identity verification (if you apply) — the name on the document, the last four digits of the ID number only, which type of document the moderator looked at, and the result · for a juristic person we keep the company name, the 13-digit registration number and the authorised signatory, which are shown on the listing page so buyers can check them with the Department of Business Development themselves
• · Searches you saved (if you save one) — the search conditions (area, type, budget and so on), when you last opened it, and when the last summary email was sent; these tell you how many new listings there are and send at most one summary email per day, only on days with something new · you can stop the emails one search at a time on the site, or all of them from the link in the email without logging in · visible only to you, and deleted immediately when you delete the search or your account
• · Package orders and transfer slips (if you buy) — the package chosen, the period, the amount, the reference number, any note you type, and the slip image, which shows the sender name, part of the account number and the amount · the system strips hidden metadata from the file before storing it, keeps it where there is no public link, lets only you and an administrator open it, and deletes the slip file 180 days after the decision (or in the next run if you delete your account). The order record itself is kept as the record of payment received. This site does not accept credit cards and never sees your banking credentials
• · Records of policy acceptance — at registration and every time you accept a new version, the system records which version, when, from which IP address and which device, as a new row each time with nothing deleted, so either side can check it later
• · Anonymous usage statistics — which pages are opened, time spent on a page (counted only while the tab is open), search terms, filters used, buttons clicked, device type and the site you came from, so we can see which parts of the site actually work and what to improve. Not linked to your account, no IP address stored, and no cookies — visitors are counted with a hash that changes every day, so nobody can be followed across days · phone numbers, ID numbers (runs of 9 digits or more) and emails in search terms are replaced with [ปิดไว้] before being stored · individual events are deleted after 90 days, leaving only daily totals · if your browser sets Do Not Track or Global Privacy Control, nothing is collected at all · listers see only the totals for their own listing (how many times the listing page was opened, and how many searches were made in that area and type), with no way to know who opened it, because the data has no identity in it to begin with

Your password, phone number and travel destinations are never written into the change log — the system always replaces them with "[redacted]" before writing

2. What we do not collect, and do not do

• · We do not keep the coordinates in your photos — phone cameras embed GPS coordinates in image files by default. The system strips that data as the file arrives, before anything is written to the server, so published photos carry no coordinates
• · We do not accept or store copies of ID cards or company certificates — the system has nowhere to upload such files, and does not store the 13-digit national ID number. A moderator looks at the document with you through another channel and records only the result, because keeping copies would demand controls we do not yet have
• · We do not sell or rent your data to anyone
• · We never disclose your contact details to the other party automatically — contact details are shared only when you press share yourself, and the system records when you did
• · We do not use behavioural advertising and embed no third-party tracking scripts — the usage statistics above are kept in our own system and are not sent to outsiders (listers see only the totals for their own listing)

3. What it is used for, and the legal basis

4. Who can see your data

• · The public — only what you chose to publish: property details, price, photos and the name on your account. Listings that are still drafts, withdrawn or expired are not shown publicly
• · The person you are talking to — sees your account name and the messages you send, but not your email or phone number until you press share yourself
• · People proposing a property for your brief — see only the conditions (budget, type, area, timeframe). They do not see your name, email or travel destinations, which are encrypted in the database
• · The moderators — access only what is needed to check accuracy and decide on complaints, and every action they take is logged

5. External services your browser contacts

This site loads files from the services below directly from your browser, so those providers receive your IP address as a natural part of the request.

The share buttons (LINE / Facebook) are not embedded scripts — they are plain links. Your browser contacts LINE or Facebook only when you press share, and what is sent is the listing link plus the short text visible on that page. None of your account information goes with it

6. How long it is kept

• · Account and profile data — จนกว่าคุณจะลบบัญชีเอง
• · Conversations and messages — จนกว่าฝ่ายใดฝ่ายหนึ่งจะลบบัญชี
• · Listings and property data — ประกาศยังอยู่หลังผู้ลงประกาศลบบัญชี แต่ไม่มีชื่อผู้ลงประกาศติดอยู่
• · The change log — เก็บถาวรเท่าที่ระบบยังให้บริการ เพราะเป็นบันทึกว่าใครแก้ข้อมูลอะไร

When you delete your account, the system immediately deletes the conversations where you were the buyer, the appointments you requested, your buyer briefs, the listings you saved and the proposals you made. Listings, photos you uploaded, messages you sent to other people and the change log remain, but with your name removed, because the other party and the audit system still need them. A listing with no owner has nobody to confirm its freshness, so it is downgraded to "may not be current" on its own schedule

7. Your rights under the PDPA

• · Access the data we hold about you, and request a copy
• · Correct inaccurate data — you can change your name, email and password yourself on the profile page
• · Erase — you can delete your account yourself on the profile page, or contact us to do it
• · Restrict the use of your data temporarily
• · Object to processing based on legitimate interest
• · Port your data to another provider in a machine-readable format
• · Withdraw consent you have given, at any time
• · Complain to the Personal Data Protection Committee (PDPC) if you believe we have acted wrongly

These rights can actually be exercised from inside the system, not only by writing us an email: log in and go to "My personal data" You can download a copy of your own data as a file straight away (no approval queue), see your own history of policy acceptances, and file a request to correct, restrict, object or withdraw consent, which we answer within the 30 days the law allows.

The data copy does not include the other party's messages — what they wrote is their own personal data, so your right to a copy is not a way to read someone else's information

8. Data security

• · Passwords are stored as hashes; nobody, including the administrator, can read your real password
• · Travel destinations in a buyer brief are encrypted in the database and are never exposed through the API
• · Every change to information others can see is recorded with who made it, so it can be checked later
• · Even so, no system is one hundred percent secure — please use a password you do not use anywhere else

9. Contact us

The operator's contact details have not been filled in — they must be set in config/legal.php before opening the site to outside users