Privacy Notice

Effective date: 20 October 2025. This notice explains how Undersun Estate complies with the EU General Data Protection Regulation (GDPR).

1. GDPR data controller & lawful bases

Undersun Estate (Phuket, Thailand) is the controller for enquiries, consultation bookings, investment requests and analytics gathered through the English version of this website. Processing relies on Articles 6(1)(a), 6(1)(b) and 6(1)(f) of the General Data Protection Regulation.

  • Contractual necessity – providing property proposals, organising viewings, drafting brokerage agreements.
  • Legitimate interest – IT security, fraud prevention, demand analytics for Phuket real estate.
  • Consent – newsletter, remarketing pixels, optional analytics cookies.

2. Categories, retention & transfers

We store identification details (name, email, phone), investment preferences, consultation notes, browser identifiers (IP, cookies) and logs. Records linked to concluded contracts are retained for five years; consent-based marketing data is kept until withdrawal. Hosting takes place in the EU, US and Thailand using SCCs and PDPA-compliant agreements.

3. Cookies & similar technologies

Strictly necessary – authentication, session security, preferred currency (12 months).

Performance/analytics – Google Analytics 4 (14 months) enabled only after explicit consent in the cookie banner.

Withdrawal – revoke at any time in browser settings or by contacting /en/contact/.

4. Your GDPR rights

You may exercise access, rectification, erasure, portability, restriction and objection rights by emailing privacy@undersunestate.com. You also have the right to complain to your local Data Protection Authority.

Contact the Data Protection Officer

Email: privacy@undersunestate.com

Postal address: 59/358 ตำบล กะทู้ อำเภอกะทู้, Kathu, Phuket, 83120, Thailand

Phone: +66 63 303 3133

Supervisory authorities: relevant EU Data Protection Authorities under the GDPR.