Privacy Policy for Thai.Rentals

This Privacy Policy describes how Thai.Rentals ("we," "us," or "our") collects, uses, and discloses your personal information when you use our website (Thai.rentals) to browse, inquire about, or book apartment rentals.

We are committed to protecting your privacy and ensuring that your personal data is handled in a safe, respectful, and lawful manner. This policy has been drafted to comply with Thailand's Personal Data Protection Act (PDPA). We also incorporate the high standards of international data privacy laws, such as the General Data Protection Regulation (GDPR), to protect the data of all our international guests.

1. Information We Collect

We collect various types of information, including:

• Personal Identification Information: Your full name, email address, phone number, nationality, and, where required for legal compliance, a copy of your passport or identification card. This is necessary to fulfill legal obligations in Thailand, such as TM30 reporting to Thai Immigration authorities.
• Booking Information: Details of your reservations, check-in/out dates, and special requests.
• Communications: The content of your emails and messages to us.
• Technical Information: IP address, browser type, and usage data, collected via cookies. For details, see our separate Cookie Policy.

2. How We Use Your Information

Your information is used for the following purposes:

• To Provide Our Services: Processing bookings and managing your stay.
• To Communicate with You: Responding to inquiries and providing support.
• For Payment Processing: Facilitating payments for your reservations.
• To Comply with Legal Obligations: Meeting our legal requirements in Thailand, including TM30 Immigration Reporting, rental documentation, and tax compliance.
• For Marketing Purposes: With your explicit consent, we may send you promotional offers.

3. Legal Basis for Processing

We process your data based on:

• Performance of a Contract: To fulfill our booking agreement with you.
• Legal Obligation: To comply with Thai laws (e.g., immigration and tax regulations).
• Consent: For marketing communications.
• Legitimate Interests: To improve our services and prevent fraud.

4. Data Sharing and Disclosure

We may share your information with:

• Third-Party Service Providers: We use external services that act as our Data Processors. Our main provider is Lodgify: Our website and booking system are powered by Lodgify. They process your data on our behalf and under our strict instructions.
• Online Travel Agencies (OTAs): If you book through a platform like Booking.com or Airbnb, they share your booking details with us.
• Payment: For direct bookings, we receive payment information from our bank.
• Legal Authorities: We disclose information to Thai authorities, such as the Immigration Bureau for TM30 reporting, when required by law.

5. International Data Transfers

Your personal data may be processed in countries outside your own, as our service providers (like Lodgify) operate globally. When your data is transferred outside of the European Economic Area (EEA), we rely on our service providers' commitment to protect your data. They are required to use legally-recognized transfer mechanisms, such as the EU's Standard Contractual Clauses (SCCs), to ensure your data receives a level of protection equivalent to that provided within the EU.

6. Your Data Protection Rights

You have the right to access, rectify, erase, restrict, or object to the processing of your data, and the right to data portability. To exercise these rights, please contact us. As the Data Controller, we are responsible for fulfilling your request, which includes coordinating with our service providers like Lodgify to ensure your rights are respected across all systems where your data is processed. You also have the right to lodge a complaint with a data protection authority.

7. Data Retention

In accordance with the data minimization and storage limitation principles of GDPR and PDPA, we are committed to retaining your personal data only for as long as necessary. It is our policy as the Data Controller to enforce the following retention periods:

After these periods expire, we take active steps to ensure your personal data is securely and permanently deleted from all systems under our control, including instructing our data processors accordingly.

8. Cookies and Similar Technologies

Our website uses cookies. Please see our detailed Cookie Policy for more information.

9. Children's Privacy

Our services are not directed to individuals under 18, and we do not market to children. However, we may collect personal information about children as part of family bookings made by their parents or legal guardians.

When we collect information about children, we:

• Only collect it with parental consent as part of a family booking
• Use it solely for accommodation services - providing your stay and meeting legal requirements
• Apply the same data protection standards as for adult guests
• Require adult booking - all reservations must be made by a parent or guardian with authority to consent on behalf of the child

If you are under 18, please ensure your parent or guardian makes the booking and provides any necessary information on your behalf.

10. Changes to This Privacy Policy

We may update this policy periodically. The new version will be posted on this page with an updated "Effective Date".