Privacy Policy

Last Updated: August 24, 2025

kesorn co.,ltd (hereinafter referred to as “the Company,” “we,” “us”) is committed to protecting your personal data privacy. This Privacy Policy aims to explain how we collect, use, disclose, and protect your personal data in accordance with the Kingdom of Thailand’s Personal Data Protection Act, B.E. 2562 (2019) (PDPA) and other applicable laws, including the platform policies of third-party services such as Facebook and Google.

Please read this policy carefully. By using our website or services, especially by registering or logging in via third-party services, you signify that you have read and understood the terms of this Privacy Policy.

 

1. Personal Data We Collect

 

We may collect and process the following types of personal data:

  • Identification Data: e.g., name, nationality, date of birth, passport or ID card number.

  • Contact Data: e.g., address, telephone number, email address, LINE ID.

  • Data from Third-Party Logins (Facebook/Google): When you register or log in to our service using Facebook or Google, we collect your public profile name, email address, and profile picture.

  • Financial Data: e.g., bank account information, proof of income, and financial status information related to real estate transactions.

  • Transactional Data: e.g., information about properties you are interested in, properties you save as favorites, properties you list for sale, budget, purchase/rental history, and details related to our services.

  • Technical Data: e.g., IP address, browser type, operating system, and browsing behavior data on our website (collected via Cookies).

  • Marketing and Communication Preference Data: e.g., your consent to receive our marketing materials and your communication preferences.

 

2. How We Collect Your Personal Data

 

We collect your personal data in several ways, including:

  • Directly from you: When you contact us via our website’s contact form, telephone, email, or in person to list a property or make an inquiry.

  • Through Third-Party Authentication Services: When you choose to register or log in to our website using Facebook Login or Google Login.

  • Automatically: When you interact with our website, we automatically collect your technical data through Cookies and similar technologies.

  • From third-party sources: We may receive your personal data from third parties, such as other real estate agents, property developers, your legal representatives, or public sources.

 

3. Legal Basis and Purposes for Using Your Personal Data

 

We process your personal data only when the law allows us to. The primary purposes and legal bases include:

  • Contract Performance: To provide the real estate brokerage services you have requested and to fulfill our agreement with you. This includes:

    • Creating and managing your user account to allow you to list properties for sale.

    • Enabling you to save favorite properties and view market data.

    • Facilitating communication between you and potential buyers/sellers.

  • Legitimate Interests: For the legitimate interests of our business operations (e.g., improving our services, conducting market analysis, maintaining website security), provided that these interests do not override your fundamental rights.

  • Legal Obligation: To comply with applicable laws and regulations, such as Anti-Money Laundering (AML) and tax requirements.

  • Your Consent: In specific situations (e.g., for sending marketing communications not directly related to our services), we will obtain your explicit consent beforehand.

4. Disclosure of Personal Data We may share your personal data with the following parties when necessary:

  • Property Sellers/Buyers/Landlords/Tenants: To facilitate a real estate transaction.
  • Professional Advisors: e.g., lawyers, accountants, banks, to assist in completing transactions and providing professional services.
  • Government Agencies: e.g., the Land Department, Revenue Department, to complete legally required registrations and filings.
  • Technology Service Providers: e.g., website hosting providers, IT support companies. We require all third parties who receive your data to respect the security of your personal data and to treat it in accordance with the law.

5. International Data Transfers In some cases, we may transfer your personal data outside of Thailand. We will only conduct such transfers if we ensure the recipient has data protection standards equivalent to or higher than those under the Thai PDPA, or if other conditions stipulated by law are met.

6. Data Security We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way.

7. Data Retention We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under Thai law, certain transaction and accounting records may need to be retained for up to 10 years.

8. Your Rights Regarding Personal Data Under the Thai PDPA, you have the following rights:

  • Right to Withdraw Consent: You may withdraw your prior consent at any time. Please note that withdrawal does not affect the lawfulness of processing based on your consent before its withdrawal.
  • Right of Access: You can request access to a copy of the personal data we hold about you.
  • Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): Under specific legal conditions, you can request the deletion of your personal data.
  • Right to Restrict Processing: Under specific legal conditions, you can request the restriction of the processing of your personal data.
  • Right to Data Portability: You can request that we transfer your data in a commonly used format to you or another controller.
  • Right to Object: You can object to the processing of your data based on our legitimate interests.

To exercise any of these rights, please contact us using the details below.

8.1. User Data Deletion Instructions (Required for Facebook/Google)

 

In compliance with Facebook and Google platform requirements, you have the right to request the deletion of your account and any personal data we have collected through their login services.

To request the deletion of your data, please send an email to leon@kesorn.co.th with the subject line “Data Deletion Request”. Please include the name and email address associated with your account so we can identify you. We will process your request and confirm the permanent deletion of your account data within 14 business days.

 

9. Use of Cookies (Reinforced) Our website uses Cookies to distinguish you from other users of our website. Cookies are categorized as “Necessary Cookies” (to ensure basic website functionality) and “Non-necessary Cookies” (e.g., for analytics and marketing). We will only use Non-necessary Cookies after obtaining your explicit consent. You can manage your preferences at any time through the Cookie management tool on our website. You can also set your browser to refuse all or some Cookies, but this may affect the functionality of some parts of the website.

10. Contact Us

 

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your legal rights, please contact our Data Protection Officer / Responsible Person:

  • Company Name: kesorn co.,ltd

  • Email: leon@kesorn.co.th

  • Address: 345/136 Karnkanok 20, soi 14. Village No 5, Sansainoi Sub-district, Sansai District, Chiangmai Thailand 50210

11. Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page. We recommend that you check this page periodically for the latest information.

Important Note: This Privacy Policy is a general template designed to meet the basic requirements of the Thai PDPA. We strongly recommend that you consult a qualified lawyer practicing in Thailand who is familiar with data protection law before its official publication to ensure it fully complies with your specific business needs.