Privacy Policy

Who we are

Gatepost Pattaya runs this website and decides how personal data is used here. To reach us, use the contact form on this site or LINE: @gatepost.

What we collect

• Forms: your name, phone number, LINE id or email, your message, and what you are looking for or listing.
• Accounts: your phone number or LINE account, saved listings and saved searches.
• Agents: your name, agency, contact details, listings and photos, plus how often your listings are viewed, clicked or reported.
• Visits: a scrambled code made from your IP address and browser, used to count views and clicks and to stop abuse. Our hosting providers also keep short-lived technical logs, which include IP addresses.
• Facebook posts: the link, the text with names, phone numbers, LINE ids and links removed, the details we read from it, and a fingerprint of each photo.
• Street signs: photos of For Rent and For Sale signs, their location, and any phone number or LINE id on the sign.

We do not ask for payment details, ID cards or sensitive data such as health or religion, except that we may ask you to prove who you are when you make a privacy request.

Why we use it, and our legal basis

• To answer your enquiry or request and run your account: this is needed to do what you asked (contract).
• To collect public property posts and signs, keep listings current, merge duplicates, flag likely scams, rank agents by reliability, and show visitors a useful market: our legitimate interests and those of people searching for a home, balanced against your rights.
• To count views and clicks, keep the site secure and prevent abuse: our legitimate interests.
• To publish an agent's name and contact details: that agent's consent, which can be withdrawn at any time in the agent dashboard.
• To comply with the law, for example answering a lawful order: legal obligation.

We do not make decisions with legal effects on you by automated means alone. Automated checks only affect how listings are flagged or ranked, and you can ask a person to review them. We do not use your data for marketing messages unless you ask us to.

Do you have to give us your data?

No law requires you to. But we cannot reply without a way to contact you, and you cannot log in without a phone number or LINE account. You can browse the site without giving any details.

If you are in a Facebook post or on a sign

We do not get this data from you directly. It comes from public Facebook groups and pages, through staff, a browser extension and a data collection service, or from signs displayed in public. We do not store Facebook names, profile ids or comments, and we remove names and contact details from post text before storing it. Removal is automatic and may occasionally miss something: tell us if it does.

We store the number on a sign privately. When someone asks about that property we may call or message the number to pass on the enquiry. If you do not want this, or do not want your property shown, use the contact form and we will remove it.

Who sees it

We do not sell personal data. Requests posted on the site appear publicly without your contact details or note. Agents' names and contact details are public once they agree. Gatepost staff see enquiries, and we pass an enquiry to the agent, owner or developer only when that is needed to answer it. A property agent may handle enquiries sent to Gatepost. We also use these service providers, under their terms for handling data:

• Supabase stores our data and handles logins. Vercel hosts the site and counts page views with Vercel Web Analytics, which uses no cookies and keeps no IP address or anything else that identifies you.
• Anthropic's Claude reads and translates listing text after names and contact details are removed. It also reads sign photos, which can include the number on the sign, and looks once at each Facebook photo for a phone number, LINE id or name: photos that show one are not displayed. We keep only that yes or no, never the photo or what it says.
• Apify collects posts from public Facebook groups and pages.
• LINE handles LINE login and carries our alerts to staff, which include the name, contact and message of an enquiry. An SMS provider sends login codes.
• Facebook, developers' websites and OpenFreeMap supply images and maps directly to your browser, so they can see your IP address. Buttons to Facebook, LINE, WhatsApp or phone take you to those services, and their own policies apply.

Data outside Thailand

These providers store or process data in other countries, including Singapore, the United States and Japan. We send data abroad only as needed to run this service, under the provider's data-protection terms or another ground the PDPA allows.

How long we keep it

• Enquiries, owner submissions and privacy requests: 24 months, then names, contacts and messages are deleted.
• Requests from the site: contact details and notes are deleted after 12 months.
• Accounts and agent profiles: until you ask us to delete them.
• Visitor codes: 13 months, then removed; the totals stay. Reports of a gone listing: 13 months.
• Facebook post text: 24 months after we first saw the post.
• Sign photos and the numbers on them: 12 months, or until the listing ends if it is still live then.
• Listings leave search results 30 days after their last check. A page saying the listing has gone stays online, without photos or contact details.
• Hosting logs: for the provider's normal period, and longer if the law requires it.

We may keep data longer where the law requires it or to deal with a legal claim.

Security

Access to personal data is limited to staff who need it, and connections to the site are encrypted. If a breach puts your rights at risk we will report it to the regulator within 72 hours where the law requires, and tell you if the risk is high.

Cookies

We use only the cookies the site needs: one set to keep you logged in (sb-…), one to remember your language (NEXT_LOCALE), and a short-lived one during LINE login (line_oauth). They need no consent because the site cannot work without them. We use no advertising or analytics cookies. If we add any, we will ask you first.

Your rights

You can ask to see or get a copy of your data, have it moved, correct it, delete it, object to how we use it, restrict its use, or withdraw consent. Withdrawing consent does not affect what we did before. We may refuse where the law allows, and we will tell you why.

Use the contact form on this site, or message us on LINE. We may need to confirm your identity. We check a request within 15 days and answer within 30 days of confirming it, or 60 for a large or complex one, and we tell you if that happens. Electronic copies are free. If a request has real costs we will tell you the fee first, and it will not be more than those costs.

You can also complain to Thailand's Personal Data Protection Committee (pdpc.or.th).

Children

This site is for adults. If you are under 20, ask a parent or guardian before giving us your details.

Changes

We will update this page when our practices change, and the date above shows the latest version. If a change matters for you we will say so on the site or tell you directly. Translations are for convenience; if they differ, the Thai version prevails.