GDPR & PDPA

Privacy Policy

Last updated: 4 June 2026

This translation is provided for information only; the French version prevails.

Guide Immo Thaïlande is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU 2016/679) and the Personal Data Protection Act B.E. 2562 (Thailand, 2019). This policy describes the processing operations we carry out and the rights available to you.

1. Data controller

The data controller is Guide Immo Thaïlande, represented by Eric Auguin (publication director), whose registered office is located at South Pattaya Road, 20150 Pattaya, Chonburi, Thailand.

Data Protection Officer (DPO): privacy@guide-immo-thailande.com

2. Data we collect

  • Account data: surname, first name, email address, encrypted password, telephone number (optional), avatar.
  • Professional profile data: agency name, real estate licence number, languages spoken, biography, profile photo.
  • Listing data: photos, descriptions, prices, precise geographic coordinates, legal status of the property.
  • Transaction data: billing details, payment history (bank card data is processed exclusively by our PCI-DSS service provider Stripe — we do not store it).
  • Browsing data: IP address, browser type, pages viewed, session duration (analytics cookies, subject to consent).
  • Communications: emails and messages exchanged via our internal messaging system, contact forms, appointment bookings.

3. Purposes of processing

Your data is used to:

  • Provide the service (account creation, publication of listings, search).
  • Secure the platform (fraud prevention, moderation of listings).
  • Handle billing and the management of Pro Space subscriptions.
  • Put buyers / tenants in contact with agents / sellers.
  • Send the newsletter, with your prior explicit consent.
  • Carry out statistical analysis of traffic, in accordance with your cookie consent.
  • Comply with our legal obligations (accounting, taxation, anti-money laundering).

4. Legal basis

Depending on the purpose, processing is based on:

  • The performance of the contract (account creation, paid services).
  • Your consent (newsletter, analytics and marketing cookies).
  • Our legitimate interest (security, fraud prevention).
  • Compliance with legal obligations (invoicing, retention of accounting records).

5. Retention period

  • Active account: duration of the contractual relationship + 3 years from the last login.
  • Archived listings: 5 years for legal traceability.
  • Billing data: 10 years (accounting obligation).
  • Analytics cookies: 13 months maximum.
  • Newsletter: until you unsubscribe, then 1 year in legal anti-spam archiving.

6. Recipients and sharing

Your data is accessible only to our authorised staff and to the following processors, who are bound by compliant data processing agreements:

  • Hosting: Hostinger (EU / Lithuania).
  • Payment: Stripe (Ireland, PCI-DSS certified).
  • Transactional email: Resend / Postmark.
  • Analytics: Plausible (EU, no third-party cookies) or Google Analytics with consent.
  • Mapping: Mapbox / OpenStreetMap.

No data is sold to third parties. Your data may be disclosed upon a lawful request (judicial or administrative authority).

7. Transfers outside the EU

Part of the processing is carried out in Thailand. These transfers are governed by the standard contractual clauses adopted by the European Commission and, for Thailand, by the PDPA compliance of the processors concerned.

8. Your rights

You have the following rights at any time:

  • Right of access to your data.
  • Right to rectification of inaccurate data.
  • Right to erasure (“right to be forgotten”).
  • Right to data portability (structured export in JSON / CSV format).
  • Right to object to processing.
  • Right to restriction of processing.
  • Right to lodge a complaint with the CNIL (France) or the PDPC (Thailand).

To exercise these rights, contact the DPO at privacy@guide-immo-thailande.com. We respond within 30 days at most.

9. Cookies

For details of the cookies we use, please see our cookie policy. You can review your consent at any time from the page footer.

10. Security

Encrypted connections (TLS 1.3), hashed passwords (bcrypt), IP-restricted database access, encrypted daily backups, logging of administrator access and annual penetration tests.

11. Minors

Our service is not intended for minors under the age of 16. We do not knowingly collect data concerning minors.

12. Changes

This policy may change. You will be notified of any substantial change by email and by a banner on the site, at least 30 days before it takes effect.

13. Contact