บริษัท โอฬารแล็บ จำกัด (OlanLab), operator of Tongjai Property, is the controller of personal information processed for the website services described here. This notice explains information used for property searches, accounts, listings, enquiries and services, and how you can manage your information.
1. Who this notice covers
This notice covers visitors, members, owners, agents, representatives, enquirers and people whose information appears in listings or documents provided to us. Owners, agents and external providers you contact directly are responsible for their own use of information. Review their notices too.
2. Information and its sources
- Accounts: names, email addresses, optional phone numbers, profile and authentication information. Passwords are stored in a form used to verify them, not as readable passwords displayed to staff.
- External sign-in: when you choose an available Google, Facebook, LINE or Apple sign-in, we may receive an identifier, name, email and profile image according to the provider's response and permissions. We do not receive that account's password.
- Listings: property details, location, photos, prices, contact details and information you put in text or images.
- Enquiries and services: names, emails, phone numbers, messages, listing references, package details, complaint or request evidence, and necessary payment information if you use a paid service.
- Technical information: IP addresses, browser information, timestamps, temporary identifiers, cookies, search filters, views and contact-click events, used for operation, security, recommendations and statistics.
Sources include what you provide, system use, your chosen sign-in provider, and advertisers or complainants supplying relevant information. Only provide others' information when entitled to do so. Avoid unnecessary sensitive information or complete identity documents.
3. Purposes and lawful bases
- Your request or contract: creating and maintaining accounts, publishing and managing listings, responding to enquiries, delivering packages and resolving service issues.
- Legitimate interests: security, spam and fraud prevention, complaint investigation and service improvement, taking account of necessity and effects on your rights.
- Legal obligations: lawful orders, relevant accounting or tax duties, and handling rights and claims.
- Consent where required: activities or tracking technologies requiring consent must be explained and consent obtained separately before use. Reading this notice is not blanket consent.
Required form fields are needed for the relevant request; without them we may be unable to create an account, receive a request or publish a listing. Optional information should not be made a condition beyond what is necessary. New purposes require consideration of lawful grounds and further notice where applicable.
4. Public information
Contact names, phones, emails, LINE details, property locations, images and public listing text may appear on the website and search engines. Not all account information becomes public automatically. Review contact fields and images before submitting a listing and avoid unnecessary documents or residents' information.
Telephone, email, LINE and map links open the channel you select. Information sent directly through those channels is also handled by the recipient. Website contact-form messages reach our team to address your request.
5. Who may receive information
Relevant staff, system or storage providers, email and sign-in providers, payment providers involved in your selected service, advisers and competent authorities may receive information necessary for their role and lawful purpose. Appropriate scope restrictions and safeguards apply to processors.
Making a listing available to interested users is part of the advertiser's requested service. It does not authorise unrelated marketing using member information without a lawful basis.
6. External services and international transfers
Sign-in, map or contact services you choose may process information overseas under their own policies. For transfers we undertake, we consider necessity, lawful grounds and legally required safeguards, including additional notice or consent where necessary.
7. Retention
Accounts and listings are kept as necessary while services are used and afterwards for requests, disputes, legal duties, backups or security. Enquiries and complaints are retained according to their handling and any continuing need. When no longer necessary, information will be deleted, destroyed or de-identified through the relevant processes.
Listing-statistics deduplication keys are scheduled for removal during maintenance once older than two hours. Daily statistics have a 400-day retention window, enforced by maintenance, while aggregate lifetime totals may remain with a listing without viewer-identifying details. Device storage durations are described in our Cookie policy. Removing a public listing does not instantly erase third-party copies or every category of information.
8. Security
We apply appropriate measures such as access restrictions, authentication, separation of public information and protection against abnormal use. Protect passwords, sign out on shared devices and report suspected unauthorised access. We will assess personal-data breaches and take action, including legally required notifications to authorities or affected individuals.
9. Your rights
Subject to applicable conditions and exceptions, you may request access or copies, correction, portability, objection, erasure or de-identification, restriction, and withdrawal of consent for consent-based activities. Withdrawal does not invalidate lawful processing before withdrawal and may affect services requiring that information.
Use our Contact page, label the message “Personal-data request”, and include your account email, requested action and a reply channel. We may seek proportionate identity verification, never your password or sign-in code, and will respond within applicable legal time limits. Where a request is declined or limited, we will explain the reason as appropriate. You may complain to Thailand's Personal Data Protection Committee Office through its applicable procedures.
10. Minors and others' information
Listings and agreements must comply with users' legal capacity. Obtain any necessary legal-representative consent before supplying information or using a service. Guardians or affected individuals may contact us about information that should not be published.
11. Updates and contact
Revisions and an update date will appear here. Material changes of purpose or use will receive additional notice or consent where required. The controller is บริษัท โอฬารแล็บ จำกัด (OlanLab). Contact us directly through the Tongjai Property Contact page about personal information.
