Privacy Policy

Andaman Asset Solution Co., Ltd. acts as the Data Controller for personal data collected through our website and sales channels.

We do not request sensitive personal data, such as race, religion, health information or biometric data, through the forms on this website.

Please do not include sensitive personal data in enquiry messages. If such information is received, we will assess and handle it in accordance with applicable law.

• Identity and contact data: full name, email address, phone number, nationality.
• Interest data: the project you enquired about and any message you provide.
• Technical data: IP address, browser user agent, and the date and time of submission.
• Attribution data: UTM parameters (utm_source, utm_medium, utm_campaign) indicating how you reached our site.
• Consent records: whether consent was given, when it was given, and the version of the consent wording and privacy notice presented to you at the time.

Where enabled with your consent, analytics and marketing technologies may collect cookie or online identifiers, pages visited and interactions with the website. Details of the technologies and their retention periods are set out in section 9 (Cookies) below.

• To contact you with project information, arrange viewings and present purchase terms: performance of a contract or steps taken at your request before entering into a contract, where applicable (s.24(3)).
• To send news, promotions and event invitations: consent, which you may withdraw at any time.
• To maintain website security and prevent automated form abuse: legitimate interest (s.24(5)), subject to a balancing assessment.
• To analyse website usage and measure marketing performance using non-essential tracking technologies: your separate consent (s.19).
• To comply with applicable law, including tax and anti-money-laundering obligations: legal obligation (s.24(6)).

Marketing consent is optional. Declining or withdrawing it does not affect our response to your enquiry or your ability to request a viewing.

We require sufficient contact information to respond to your enquiry or arrange a viewing. If you do not provide the required information, we may be unable to fulfil your request. Optional information and marketing consent are not required for an enquiry.

We do not sell your personal data. We may disclose it, only as necessary, to:

• Service providers processing data on our behalf, including hosting, email and CRM providers, under data processing agreements.
• Sales agents and business partners appointed to contact you about the project you enquired about.
• Government agencies or other authorities where required by law or lawful order.
• Analytics and advertising service providers for the purposes described in this notice and subject to applicable consent requirements. Their role as a processor or separate controller depends on the service and its configuration.

Some of our service providers store data on servers outside Thailand. Where that occurs, we ensure appropriate safeguards are in place in accordance with sections 28 and 29 of the PDPA.

• Prospect enquiries that do not become customers: retained for up to 2 years from the last contact.
• Customer records under a sale and purchase agreement: retained for the period required by applicable law and as necessary for contractual obligations or the establishment, exercise or defence of legal claims. The applicable retention period depends on the record type and relevant legal requirements.
• Consent records: retained for as long as the consent is active and for 1 further year after withdrawal, as evidence of compliance.

Technical logs and analytics records are retained only as long as necessary for their stated purposes, taking account of security needs, applicable legal requirements and configured retention settings. Where a legal obligation or legal claim requires longer retention, the relevant data may be retained for that purpose and deleted or anonymised when no longer necessary.

Under the PDPA you have the right to:

• Withdraw consent (s.19).
• Access your personal data and obtain a copy (s.30).
• Request data portability to another controller (s.31).
• Object to the collection, use or disclosure of your data (s.32).
• Request erasure or destruction of your data (s.33).
• Request restriction of processing (s.34).
• Request rectification so your data is accurate and up to date (s.36).
• Lodge a complaint with the Office of the Personal Data Protection Committee (s.73).

To exercise any of these rights, contact us using the details below. We will handle your request without undue delay and within the time limit required by applicable law. Requests for access under section 30 will be fulfilled without delay and no later than 30 days after receipt, unless a lawful ground for refusal applies. We may request information reasonably necessary to verify your identity. If a request is refused, we will explain the reason as required by law. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Our website uses cookies that are strictly necessary for it to function and, with your consent, analytics and marketing cookies. You can configure your browser to refuse cookies, though some parts of the site may not work as intended.

• Strictly necessary: a language cookie (NEXT_LOCALE), which lasts for your browser session, and your cookie choice, kept in your browser's local storage until you change it or we publish a new version of this notice. Where it is enabled on our forms, Google reCAPTCHA sets a security cookie (_GRECAPTCHA, up to 6 months) to tell genuine enquiries from automated abuse.
• Analytics, only with your consent: Google Analytics 4 (_ga and _ga_<ID> cookies, up to 2 years), with IP addresses anonymised.
• Marketing, only with your consent: Meta Pixel (_fbp cookie, up to 3 months).

You can grant or withdraw consent for analytics and marketing cookies at any time via the "Cookie Preferences" link in the site footer.

Non-essential analytics and marketing tracking based on consent will not be activated before you consent. You may reject these categories without losing access to the general information on this website.

We maintain appropriate technical and organisational measures, including encryption of data in transit, access restricted to staff who need it, and access logging, to protect against unauthorised access, alteration or disclosure.

We may update this notice from time to time. Whenever the substance changes we publish a new version with its own version number and effective date. Consent you previously gave remains linked to the version you accepted at the time.

If we change the purposes for which personal data is processed, we will notify you and obtain new consent where required by law before processing for the new purposes. Publishing an updated notice does not, by itself, extend any consent you previously gave.