1. Introduction
Welcome to OriAsia ("we," "us," or "our"). We operate the property analytics and listing platform available at oriasia.com(the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or use our Platform.
We are committed to complying with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), the European Union General Data Protection Regulation ("GDPR"), and other applicable international data protection laws.
By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.
2. Data We Collect
2.1 Account Data
When you create an account, we collect:
- Full name
- Email address
- Password (stored as a cryptographic hash; we never store plaintext passwords)
- Phone number (optional)
2.2 OAuth Data
If you sign in using Google Sign-In, we receive your Google profile information, including:
- Name
- Email address
- Profile photo (avatar URL)
We do not receive or store your Google password. Authentication is handled securely through the OAuth 2.0 protocol.
2.3 Property Search Data
We collect data related to your property searches, including:
- Search queries and keywords
- Filters applied (price range, property type, location, bedrooms, etc.)
- Properties you have saved or bookmarked
- Properties you have viewed
2.4 Inquiry Data
When you submit an inquiry about a property through our Platform, we collect:
- Your name and contact details (email, phone number)
- The content of your message to the agent
- The property or listing the inquiry relates to
2.5 Usage Data
We automatically collect certain technical information, including:
- Pages visited and time spent on each page
- Device type, operating system, and browser information
- IP address
- Referring URL
- Date and time of access
2.6 Location Data
We may collect location-related data through:
- Your interactions with our map features (pan, zoom, area selection)
- Search area preferences and district selections
We do not access your device's GPS without your explicit permission. Map interaction data is used to personalize your property search experience.
2.7 Cookies and Similar Technologies
We use cookies and similar technologies to maintain sessions, remember your preferences, and analyze usage patterns. For full details, please see our Cookie Policy.
3. How We Use Your Data
We use your personal data for the following purposes:
- Provide and improve services: To operate the Platform, display property listings, generate analytics, and improve your user experience.
- Connect users with real estate agents: To facilitate communication between property seekers and agents when you voluntarily submit an inquiry.
- Notifications and alerts: To send property alerts, price change notifications, and platform updates (with your consent).
- Analytics and platform improvement: To understand usage patterns, identify trends, and improve our features and content.
- Fraud prevention and security: To detect and prevent fraudulent activity, unauthorized access, and abuse of the Platform.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
4. Data Sharing
4.1 Real Estate Agents
When you voluntarily submit an inquiry about a property, we share the following information with the relevant real estate agent:
- Your name
- Your email address
- Your phone number (if provided)
- The content of your message
We do not share your browsing history, search queries, saved properties, or any other personal data with agents. Agents only receive the information you explicitly include in your inquiry.
4.2 Service Providers
We work with trusted third-party service providers who assist us in operating the Platform, including:
- Cloud hosting and infrastructure providers
- Email delivery services
- Payment processors (for future premium features)
- Analytics providers
These providers are contractually obligated to use your data only as necessary to provide services to us and to maintain appropriate security measures.
4.3 Legal Requirements
We may disclose your personal data if required to do so by law or in response to:
- Court orders or legal processes
- Requests from law enforcement or government authorities
- Protection of our rights, property, or safety, or that of our users
4.4 No Sale of Personal Data
We do not sell, rent, or trade your personal data to any third parties for their marketing or commercial purposes.
5. Data Protection
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
- Encryption at rest: Sensitive data stored in our databases is encrypted.
- Access controls: Strict role-based access controls and authentication mechanisms limit who can access personal data.
- Regular security audits: We conduct periodic security reviews and vulnerability assessments.
- Data breach notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant authorities within 72 hours of becoming aware of the breach.
6. Your Rights
Under the Thailand PDPA and the EU GDPR, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your account and associated personal data.
- Right to data portability: You may request a machine-readable copy of your personal data.
- Right to withdraw consent: You may withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of processing performed before the withdrawal.
- Right to object: You may object to processing of your personal data for certain purposes, including direct marketing.
- Right to restrict processing: You may request that we limit the processing of your personal data under certain circumstances.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
7. Data Retention
We retain your personal data for the following periods:
- Account data: Retained for the duration of your account. Upon account deletion, data is permanently removed within 30 days.
- Inquiry data: Retained for 2 years from the date of the inquiry.
- Analytics and usage data: Retained for up to 26 months.
- Cookies: Retention periods vary by type. See our Cookie Policy for details.
After the applicable retention period, data is securely deleted or anonymized so that it can no longer be associated with you.
8. Cookies
We use cookies and similar technologies for authentication, user preferences, and analytics. For a comprehensive explanation of the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.
9. International Data Transfers
Your personal data may be processed and stored on servers located outside of Thailand, including in the European Union and the United States. When we transfer data internationally, we ensure that adequate safeguards are in place, including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with our service providers
- Compliance with applicable cross-border data transfer requirements under the PDPA and GDPR
10. Children's Privacy
The Platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at [email protected].
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:
- Posting the updated policy on this page with a revised "Last updated" date
- Sending an email notification to registered users (for material changes)
- Displaying a prominent notice on the Platform
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all inquiries within 48 hours.