Privacy Policy

1. Introduction

Siam Nook ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to all individuals who enquire about, engage with, or use any of our property rental services based at 42/3 Nimmanhaemin Road, Suthep, Mueang, Chiang Mai 50200, Thailand.

For questions about this policy or your personal data, contact us at: [email protected]

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry forms: name, email address, phone number, and any message content you provide.
• Lifestyle questionnaire (long-term search clients): information about daily routines, housing preferences, work arrangements, budget range, and family composition.
• During tenancy support: details related to your rental property, landlord communications, and any issues raised under the advocacy retainer.
• Website usage: technical data collected by cookies and analytics tools (see Section 6).

We do not collect sensitive personal data (health, financial records, identity documents) unless you choose to provide such information in the context of a specific service engagement.

3. How We Use Your Data

Your personal information is used for the following purposes:

• Responding to your enquiries and providing the services you have requested.
• Conducting property searches and preparing recommendations tailored to your stated preferences.
• Communicating with landlords on your behalf where you have engaged our advocacy service.
• Maintaining records of your engagement with us for service continuity and quality.
• Improving our website and understanding how visitors interact with it.

We do not use your data for unsolicited marketing. We do not sell or share your personal data with third parties for their own commercial purposes.

Legal bases for processing: Consent (where you have provided it), performance of a contract or pre-contractual steps, and legitimate interests in operating our business and improving our services.

Retention: Active client data is retained for the duration of your engagement plus 24 months. Enquiry data from non-clients is retained for 6 months and then deleted.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or disclosure, including:

• Encrypted email and file storage for client records.
• Access restricted to team members who need the information to carry out their role.
• Regular review of data held and deletion of unnecessary records.

In the event of a data breach that poses a risk to your rights, we will notify relevant parties in accordance with applicable law.

5. Third-Party Services

We may use the following third-party services in connection with our website and operations:

• Google Analytics: website traffic analysis. Data processed under Google's privacy terms.
• Google Maps: location display. Subject to Google's terms of service.
• Email providers: for correspondence. Messages may be processed on external servers.

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies independently.

6. Cookies

Our website uses cookies to understand how it is used and to remember your preferences. You can manage your cookie preferences at any time through our Cookie Policy page.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no longer a lawful basis to retain it.
• Portability: Receive your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the content or privacy practices of those sites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has submitted personal data to us, we will take steps to delete it promptly.

10. Jurisdiction

Siam Nook is based in Thailand and this policy is governed by applicable Thai data protection legislation. Where clients are based in the European Economic Area, we also acknowledge the rights provided under the GDPR to the extent applicable to our processing activities.

11. Policy Updates

We may update this policy from time to time. Any significant changes will be communicated via our website. Continued use of our services following an update constitutes acceptance of the revised policy.

12. Contact

Data Controller: Siam Nook
Address: 42/3 Nimmanhaemin Road, Suthep, Mueang, Chiang Mai 50200, Thailand
Email: [email protected]