Privacy Policy
Effective date: 26 July 2026 · Last updated: 26 July 2026
1. Data Controller
The operator of the DealDee — DEAL D PROPERTY website (www.deal-d-property.com) (the “Company”) is the data controller.
Contact / data-subject requests: privacy@deal-d-property.com
2. Personal Data We Collect
- Identity & contact data: name, phone number, email, LINE ID, nationality
- Interest data: budget, preferred locations/projects, purpose (own use / investment / rent)
- Account data: password (one-way hashed), member type, KYC status
- Identity documents (sellers/agents/companies only): ID card or passport image, verification selfie
- Usage data: pages viewed, usage events, IP address (subject to your cookie consent)
3. Collection Channels
This website and its forms, member registration, Google/LINE sign-in, viewing requests, Facebook Lead Ads, LINE Official Account, sales galleries and the Company's authorised agents.
4. Purposes & Legal Bases
- Fulfilling your requests: contacting you back, providing project information, arranging viewings and related services (contract / request basis)
- Verifying seller identity and preventing fraud (legitimate interest / legal obligation)
- Improving the service and analysing usage (consent — analytics cookies)
- Marketing, news, privileges and promotions only with your consent (consent basis, withdrawable at any time)
5. Data Recipients
Service providers processing data on the Company's behalf under contract: hosting (Railway), database, analytics & AI (Google), payments (Stripe), automation (n8n), plus marketing agencies and ad platforms (Google, Meta, TikTok, LINE) within the scope of your cookie consent.
6. International Transfers
Data may be stored on providers' servers abroad (e.g. Singapore / United States). The Company selects providers with adequate data-protection standards as required by the PDPA.
7. Retention Period
- Member account data: for the life of the account and up to 2 years after closure
- Leads and contact requests: up to 2 years from last contact
- KYC documents: up to 5 years per applicable legal obligations
- Usage/cookie data: up to 13 months
8. Security Measures
Encrypted transport (HTTPS), one-way password hashing, role-based access control (RBAC), audit logging and need-to-know access restrictions.
9. Your Rights
Under Thailand's PDPA you have the right to:
- Access and obtain a copy of your data (self-service download on the “My Data” page)
- Rectify inaccurate data
- Erase your data (self-service account deletion on the “My Data” page)
- Object to or restrict processing
- Withdraw consent at any time without affecting prior processing
- Lodge a complaint with the Personal Data Protection Committee (PDPC)
Self-service: My Data (export / delete account) · or email privacy@deal-d-property.com
10. Policy Updates
The Company may update this policy from time to time; the latest revision date is shown at the top of this page.
Note: this document is an initial draft for system use. Legal counsel should verify the legal-entity details, retention periods and actual tracking tools before formal publication.