Legal
Privacy Policy
Effective in compliance with PDPA B.E. 2562 · Last updated 2026
1. Introduction
RRentin ("RRentin", "we", "us", or "our") is committed to protecting the privacy and personal data of individuals who access or use our website, mobile applications, and related services (collectively, the "Platform").
This Privacy Policy describes how we collect, use, disclose, process, and safeguard personal data, as well as the rights available to you under applicable data protection laws, including the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA") and, where applicable, internationally recognized data protection principles.
By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, you must refrain from using the Platform.
2. Scope
This Privacy Policy applies to all categories of users of the Platform, including but not limited to Owners, Tenants, Showing Agents, and Property Inspection Service Providers (collectively, "Users").
This Policy governs personal data collected directly from Users, automatically through use of the Platform, and through interactions with RRentin via third-party platforms such as social media.
This Policy does not apply to third-party services, websites, or applications that are not owned or controlled by RRentin. RRentin shall not be responsible or liable for the privacy practices of such third parties.
3. Collection of Personal Data
3.1 Data Provided Directly by Users
RRentin collects personal data that Users voluntarily provide in connection with account registration, property listings, service requests, communications, and general use of the Platform.
Such data may include, but is not limited to, full name, email address, telephone number, user preferences, saved listings, communication preferences, and any other information submitted by the User.
For Owners and Tenants, additional data may include property-related information, listing details, and communication records. For Showing Agents and Property Inspection Service Providers, we may collect professional details, service-related information, business-related data (where applicable), and communication identifiers.
Where location-based services are enabled, geolocation data may also be collected.
Users represent and warrant that all personal data provided is accurate, complete, and does not infringe upon the rights of any third party.
3.2 Data Collected Automatically
RRentin automatically collects certain technical and usage data when Users interact with the Platform. This includes device identifiers, IP address, browser type, operating system, access times, pages viewed, interaction patterns, and other diagnostic data.
We may also collect approximate geolocation data derived from IP addresses or precise location data where device permissions have been granted.
Such data is collected for purposes including system administration, security, analytics, and service optimization.
3.3 Social Media Data
Where Users interact with RRentin through third-party social media platforms, we may collect personal data that is publicly available or shared with us pursuant to the User's privacy settings on those platforms.
RRentin does not control the data processing practices of such third-party platforms and disclaims any liability arising therefrom. Users are advised to review the applicable privacy policies of those platforms.
Any reuse, republication, or external distribution of user-generated content will be subject to applicable legal requirements, including obtaining consent where necessary.
3.4 Other Collected Data
RRentin may collect additional information voluntarily provided by Users, including feedback, inquiries, survey responses, uploaded content, and customer support communications.
For avoidance of doubt, RRentin does not collect, store, or process payment card information or banking details. All payment transactions are processed by third-party payment service providers, including Omise, which operate as independent data controllers.
3.5 Children's Data
The Platform is not directed to individuals under the age of 18. RRentin does not knowingly collect personal data from minors without appropriate legal authorization.
If RRentin becomes aware that personal data of a minor has been collected without valid consent, such data will be promptly deleted.
4. Purpose and Legal Basis for Processing
RRentin processes personal data strictly for specific, explicit, and legitimate purposes in accordance with applicable data protection laws. Such processing is undertaken to enable the provision, operation, maintenance, and continuous improvement of the Platform, including user account creation and authentication, facilitation of property listings and related services, coordination between Owners, Tenants, Showing Agents, and Property Inspection Service Providers, and the management of user communications, inquiries, and support requests.
Personal data is further processed to personalize user experience, including the delivery of tailored content, recommendations, and advertisements, as well as to analyze usage patterns, enhance functionality, and optimize Platform performance. Additionally, RRentin processes personal data for purposes of security monitoring, fraud prevention, risk assessment, enforcement of contractual terms, and protection of the rights, property, and safety of RRentin, its users, and third parties.
Processing may also be conducted to comply with applicable legal and regulatory obligations, including record-keeping, reporting requirements, and cooperation with competent authorities.
The legal bases for processing include, as applicable, the necessity of processing for the performance of a contract to which the User is a party, compliance with legal obligations, the pursuit of legitimate interests of RRentin (provided such interests are not overridden by the rights and freedoms of the User), and, where required, the explicit consent of the User. Where consent is relied upon, Users retain the right to withdraw such consent at any time without affecting the lawfulness of processing carried out prior to such withdrawal.
5. Data Storage and Security
5.1 Storage
Personal data is stored using secure infrastructure and cloud-based services, including Amazon Web Services (AWS), HubSpot, Microsoft 365, and Google Drive. Data may be stored or processed in jurisdictions outside Thailand, subject to appropriate safeguards.
5.2 Security Measures
RRentin implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to encryption, access controls, authentication mechanisms, and system monitoring.
Security measures include, but are not limited to, the implementation of two-factor authentication (2FA), restricted access protocols, and periodic security assessments.
Notwithstanding the foregoing, no method of transmission or storage is completely secure. RRentin does not warrant or guarantee absolute security of personal data.
In the event of a personal data breach, RRentin shall take all necessary remedial actions and notify affected Users within 72 hours where required under applicable law.
7. Data Retention & Deletion
RRentin retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, tax, accounting, or reporting requirements.
Users may request deletion of their personal data by contacting cs@rrentin.com. RRentin will process such requests in accordance with applicable law.
Notwithstanding the foregoing, RRentin reserves the right to retain certain data where necessary for legitimate business purposes, legal compliance, dispute resolution, or enforcement of agreements.
Upon expiration of the applicable retention period, personal data will be securely deleted, destroyed, or anonymized.
8. Data Subject Rights
Subject to applicable law, Users have the right to request access to their personal data, request correction of inaccurate data, request deletion, request restriction of processing, and request data portability.
Users may also object to certain types of processing, including direct marketing, and may withdraw consent where processing is based on consent.
RRentin reserves the right to verify the identity of any requester and may refuse or limit requests where permitted by law.
Requests shall be processed within a reasonable timeframe, typically not exceeding 30 days.
Users also have the right to lodge a complaint with the relevant data protection authority.
11. Data Breach Notification
In the event of a personal data breach, RRentin shall promptly assess the nature, scope, and potential impact of the breach and take all necessary measures to mitigate risks and prevent further unauthorized access, disclosure, or loss.
Where required by applicable law, RRentin shall notify the relevant supervisory or regulatory authority without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of the breach. Where the breach is likely to result in a high risk to the rights and freedoms of Users, RRentin shall also notify affected Users without undue delay, providing sufficient information regarding the nature of the breach, potential consequences, and measures taken or proposed to address the breach.
RRentin shall maintain internal records of all data breaches, including the facts relating to the breach, its effects, and remedial actions taken, in accordance with applicable legal requirements.
12. Amendments to This Privacy Policy
RRentin reserves the right, at its sole discretion, to amend, modify, or update this Privacy Policy at any time to reflect changes in legal, regulatory, operational, or technological requirements.
Any such amendments shall become effective upon publication on the Platform, unless otherwise specified. Where required by applicable law, RRentin shall provide Users with appropriate notice of material changes, which may include notification via email, Platform alerts, or other reasonable means.
Continued access to or use of the Platform following the effective date of any amendments shall constitute acceptance of the revised Privacy Policy. Users are encouraged to review this Policy periodically to remain informed of any updates.
13. Links to Third-Party Websites
The Platform may contain links to third-party websites, applications, or services that are not owned, operated, or controlled by RRentin. Such links are provided for convenience only and do not constitute endorsement, approval, or affiliation with the respective third parties.
RRentin does not exercise control over, and shall not be responsible or liable for, the content, security, or data processing practices of any third-party services. Accessing such third-party platforms is undertaken at the User's own risk.
Users are strongly advised to review the privacy policies and terms of use of any third-party services prior to providing personal data or engaging with such platforms.
14. Contact Information
For any inquiries, requests, or complaints regarding this Privacy Policy, the processing of personal data, or the exercise of data subject rights, Users may contact RRentin at:
cs@rrentin.comRRentin reserves the right to verify the identity of any individual submitting a request and to request additional information where necessary to process such requests in accordance with applicable laws.
15. Relationship with Business Policy
This Privacy Policy shall be read together with the Business Policy, which governs the overall use of the Platform, including user obligations, service rules, liability limitations, and dispute resolution.
Nothing in this Privacy Policy shall limit, override, or otherwise affect the provisions of the Business Policy, except where required by applicable law.
9. Social Media, Advertising, and Marketing
RRentin may process personal data for marketing, promotional, and engagement purposes, including through social media platforms and third-party advertising networks. This includes the use of data to communicate with Users, respond to inquiries, promote services, and enhance brand visibility.
Where Users interact with RRentin through social media platforms, RRentin may access and process personal data made available by the User in accordance with the privacy settings of the respective platform. Such interactions may include comments, messages, or other forms of engagement, which may be publicly visible depending on the platform's functionality.
RRentin may utilize third-party advertising technologies, including but not limited to remarketing and behavioral advertising tools, to deliver targeted advertisements based on User activity on the Platform and across third-party websites. This may involve the use of tracking technologies and the sharing of limited data with advertising partners in accordance with applicable laws.
Users may opt out of receiving marketing communications at any time by following the unsubscribe mechanisms provided or by contacting RRentin directly. Users may also manage advertising preferences through third-party platform settings where applicable.
RRentin does not control and is not responsible for the data processing practices of third-party social media or advertising platforms, and Users are encouraged to review the respective privacy policies of such platforms.