English
ไทย
Русский
中文
Deutsch
TürkçePrivacy policy
In short: we collect only what we need to help you rent a home: your name, how to reach you and the homes you save. We never ask for or store passport, ID card or SIM numbers on this website. We do not sell your data and we use no advertising or analytics cookies.
1. Who we are
The data controller is Only Rental Co., Ltd. (บริษัท โอนลี่ เรนทัล จำกัด), a company registered in Thailand, registration no. 0205569015173, head office: 1/25, Room 3D, 3rd Floor, Moo 3, Nongprue Sub-district, Banglamung District, Chonburi 20150, Thailand. Contact for privacy questions: privacy@onlyrentalpattaya.com.
2. What we collect
| Data | When | Why (legal basis) |
|---|---|---|
| Name, email, optional WhatsApp/phone, password (stored only as a secure hash), language | You create an account | To run your account (contract) |
| Saved homes | You tap “Save” | To show your favourites on every device (contract) |
| Messages, your dates and the listing you ask about | You contact us on WhatsApp or LINE | To answer you and arrange viewings (steps before a contract) |
| IP address, browser type, pages requested, failed sign-in attempts | Every visit | To keep the site secure and working (legitimate interest) |
| Owner and agent details (name, contact, commission) | You list a property with us | To manage the listing (contract); never shown on the site |
Identity documents that Thai law may require for a lease (for example for the TM30 residence notification) are handled offline when the contract is signed. They are never uploaded to or stored on this website.
3. Cookies and similar technology
We use only what the site needs to work: a session cookie when you sign in, a security cookie (CSRF) for forms, and your currency choice saved in your own browser. We use no analytics, advertising or tracking cookies. If we ever add them, we will ask for your consent first.
4. Who we share data with
We do not sell personal data. We share it only with service providers who work for us and only as far as needed:
- our hosting and email providers, which run the website and send account emails;
- WhatsApp (Meta) and LINE (LY Corporation), when you choose to message us there;
- Google Maps, which receives your IP address when a map is shown;
- the property owner, when you ask to view or rent a home (your name, contact and dates);
- authorities, when Thai law requires it.
Listing texts written by our team are translated with an AI service (Anthropic). No visitor data is sent for this.
5. How long we keep it
- Account data and saved homes: until you delete your account. Deletion is immediate; backups are overwritten within 30 days.
- Enquiries: up to 2 years after our last contact.
- Security logs: up to 90 days.
- Contracts and accounting records: as long as Thai law requires (generally 5 years).
6. Your rights
You can ask to access, correct, delete, restrict or receive a copy of your data, object to its use and withdraw consent at any time. You can delete your account yourself under Account → Profile. Details under Thailand's PDPA are on our data rights page. We answer within 30 days.
7. Security
All traffic is encrypted (HTTPS). Passwords are stored with Argon2 hashing. Sign-in is locked after repeated failed attempts. Uploaded photos are re-encoded and their location data (EXIF/GPS) is removed. Only authorised staff can access the admin area.
8. Transfers abroad
Some of our providers may process data outside Thailand (for example in the EU or the USA). We use providers that offer appropriate safeguards, as required by PDPA sections 28–29.
9. Children
This site is for adults. We do not knowingly collect data from anyone under 18.
10. Changes
We will post any change on this page with a new date. Important changes will be announced on the site or by email.