บริษัท โอฬารแล็บ จำกัด (OlanLab), operator of Tongjai Property, is the controller of personal information processed for the website services described here. This notice explains information used for property searches, accounts, listings, enquiries and services, and how you can manage your information.
1. Who this notice covers
This notice covers visitors, members, owners, agents, representatives, enquirers and people whose information appears in listings or documents provided to us. Owners, agents and external providers you contact directly are responsible for their own use of information. Review their notices too.
2. Information and its sources
- Accounts: names, email addresses, optional phone numbers, profile and authentication information. Passwords are stored in a form used to verify them, not as readable passwords displayed to staff.
- External sign-in: when you choose an available Google, Facebook or LINE sign-in, we may receive an identifier, name, email and profile image according to the permissions you allow on the provider's screen. If you allow your email address to be shared, we use it as your Tongjai Property account email so you do not have to type it, to send email-verification and account-recovery messages, and to notify you about your account and listings, such as new enquiries. You can change it on your account page. We do not receive that account's password.
- Listings: property details, location, photos, prices, contact details and information you put in text or images.
- Enquiries and services: names, emails, phone numbers, messages, listing references, package details, complaint or request evidence, and necessary payment information if you use a paid service.
- Technical information: IP addresses, browser information, timestamps, temporary identifiers, cookies, search filters, views and contact-click events, used for operation, security, recommendations and statistics.
Sources include what you provide, system use, your chosen sign-in provider, and advertisers or complainants supplying relevant information. Only provide others' information when entitled to do so. Avoid unnecessary sensitive information or complete identity documents.
3. Purposes and lawful bases
- Your request or contract: creating and maintaining accounts, publishing and managing listings, responding to enquiries, delivering packages and resolving service issues.
- Legitimate interests: security, spam and fraud prevention, complaint investigation and service improvement, taking account of necessity and effects on your rights.
- Legal obligations: lawful orders, relevant accounting or tax duties, and handling rights and claims.
- Consent where required: activities or tracking technologies requiring consent must be explained and consent obtained separately before use. Reading this notice is not blanket consent.
Required form fields are needed for the relevant request; without them we may be unable to create an account, receive a request or publish a listing. Optional information should not be made a condition beyond what is necessary. New purposes require consideration of lawful grounds and further notice where applicable.
4. Public information
Contact names, phones, emails, LINE details, property locations, images and public listing text may appear on the website and search engines. Not all account information becomes public automatically. Review contact fields and images before submitting a listing and avoid unnecessary documents or residents' information.
Telephone, email, LINE and map links open the channel you select. Information sent directly through those channels is also handled by the recipient. Website contact-form messages reach our team to address your request.
5. Who may receive information
Relevant staff, system or storage providers, email and sign-in providers, payment providers involved in your selected service, advisers and competent authorities may receive information necessary for their role and lawful purpose. Appropriate scope restrictions and safeguards apply to processors.
Making a listing available to interested users is part of the advertiser's requested service. It does not authorise unrelated marketing using member information without a lawful basis.
6. External services and international transfers
Sign-in, map or contact services you choose may process information overseas under their own policies. For transfers we undertake, we consider necessity, lawful grounds and legally required safeguards, including additional notice or consent where necessary.
7. Retention
Accounts and listings are kept as necessary while services are used and afterwards for requests, disputes, legal duties, backups or security. Enquiries and complaints are retained according to their handling and any continuing need. When no longer necessary, information will be deleted, destroyed or de-identified through the relevant processes.
Listing-statistics deduplication keys are scheduled for removal during maintenance once older than two hours. Daily statistics have a 400-day retention window, enforced by maintenance, while aggregate lifetime totals may remain with a listing without viewer-identifying details. Device storage durations are described in our Cookie policy. Removing a public listing does not instantly erase third-party copies or every category of information.
8. Security
We apply appropriate measures such as access restrictions, authentication, separation of public information and protection against abnormal use. Protect passwords, sign out on shared devices and report suspected unauthorised access. We will assess personal-data breaches and take action, including legally required notifications to authorities or affected individuals.
9. Your rights
Subject to applicable conditions and exceptions, you may request access or copies, correction, portability, objection, erasure or de-identification, restriction, and withdrawal of consent for consent-based activities. Withdrawal does not invalidate lawful processing before withdrawal and may affect services requiring that information.
Use our Contact page, label the message “Personal-data request”, and include your account email, requested action and a reply channel. We may seek proportionate identity verification, never your password or sign-in code, and will respond within applicable legal time limits. Where a request is declined or limited, we will explain the reason as appropriate. You may complain to Thailand's Personal Data Protection Committee Office through its applicable procedures.
10. Minors and others' information
Listings and agreements must comply with users' legal capacity. Obtain any necessary legal-representative consent before supplying information or using a service. Guardians or affected individuals may contact us about information that should not be published.
11. Updates and contact
Revisions and an update date will appear here. Material changes of purpose or use will receive additional notice or consent where required. The controller is บริษัท โอฬารแล็บ จำกัด (OlanLab). Contact us directly through the Tongjai Property Contact page about personal information.
Tongjai CRM: business channel data and data-subject rights
Information used in Tongjai CRM
OlanLab Co., Ltd. provides Tongjai CRM for property businesses. Business owners choose the Facebook Pages or LINE Official Accounts they are authorized to manage so authorized team members can handle messages and customer information in that business's workspace.
When a Facebook Page is connected, the service uses the Page list, Page names and IDs, permissions granted by the owner and connection information to let the owner select Pages, receive messages and statuses supplied through Meta, and let the team reply. The service may store Page-scoped sender IDs, message content, images, timestamps and message statuses to display conversations and associate them with customer records. Personal Facebook inboxes are not connected.
For LINE Official Accounts, the service uses information about the connected account, user IDs supplied by LINE, messages, images and relevant statuses to provide the business inbox. Forms opened from the chat menu may request a name, contact details and property purchase or rental requirements according to the fields shown. Customers choose to open and submit these forms. Submitted information is associated with customer records and conversations in the same workspace.
CRM information is used to help the business handle inquiries, property requirements, appointments and sales. The service provider does not use CRM messages for advertising or AI training or processing. Authorized team members reply to messages. The service does not initiate automated customer follow-up from personal chats.
Access and service providers
Workspace owners and authorized team members can access information according to their roles. OlanLab operates the service and resolves service issues. The hosting provider is Hetzner Online GmbH, with the current infrastructure located in Falkenstein, Germany. Meta and LINE process information in their respective channels under their own policies.
The business connecting a channel determines the purposes for handling its customers and should inform them about its use of CRM. OlanLab processes information to provide services within the authorized scope. The responsibilities of each party must reflect the service agreements actually accepted by the business.
Disconnecting channels and requesting deletion
The service provider keeps information for as long as necessary to provide the service, handle customer needs and meet applicable legal obligations, considering the purpose and type of information. When information is no longer needed, it will be deleted or anonymized through the relevant process.
Business owners can disconnect channels in CRM. Disconnecting stops use of the connection and pending outbound work; it does not immediately delete all customer information and conversation history.
To request access, correction or deletion of information about yourself, contact the business you spoke with or use Tongjai Property's contact page. State that your request concerns Tongjai CRM and include the Facebook Page or LINE Official Account name, the relevant time period and a contact method for the response. You do not need to register a Tongjai Property account to submit a request. The service provider may request only the information needed to verify that the information relates to you. Do not send passwords, one-time codes or connection tokens.
OlanLab will examine the request with the relevant business and explain the outcome or reasons it cannot yet be completed under the laws and obligations that actually apply. Retention for transaction evidence or legal obligations may be separate from conversation data.