Privacy Policy

1. What Data We Collect

• Account information. Name, email address, phone number, and profile photo when you create an account.
• Identity verification. Passport or government-issued ID submitted during the verification process.
• Payment information. Payment method details processed and stored securely by Stripe. We do not store your full card number.
• Booking data. Dates, property details, payment history, and communication between tenants and landlords.
• Usage data. Pages visited, search queries, device information, IP address, and browser type for platform improvement and analytics.
• Location data. Approximate location based on IP address, and property locations displayed via Google Maps.

2. How We Use Your Data

• To create and manage your account and facilitate bookings.
• To verify your identity and prevent fraud.
• To process payments and issue receipts.
• To communicate with you about bookings, support requests, and platform updates.
• To improve the platform through analytics and usage patterns.
• To comply with legal obligations and resolve disputes.

3. Data Sharing

We share your data only with trusted third-party services that are essential to operating the platform:

• Stripe for secure payment processing.
• Supabase for data storage and authentication.
• Google Maps for displaying property locations.

We do not sell your personal data to third parties. We may share anonymised, aggregated data for research or analytical purposes.

4. Cookies

We use cookies to keep you logged in, remember your preferences, and understand how you use the platform. For full details, see our Cookie Policy.

5. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent for data processing at any time.
• Request a copy of your data in a portable format.
• Object to processing of your data for marketing purposes.

To exercise any of these rights, contact us at privacy@homaestates.com.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. After account deletion, we retain certain data for up to 3 years to comply with legal obligations, resolve disputes, and enforce agreements. ID verification documents are deleted within 90 days of account closure.

7. GDPR & PDPA Compliance

Homa Estates is committed to compliance with Thailand's Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR) where applicable. We process data lawfully, transparently, and only for specified purposes. If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

8. Contact for Privacy Inquiries

For any privacy-related questions, requests, or concerns, please contact us at privacy@homaestates.com.