Privacy Notice

1. GDPR data controller & lawful bases

Undersun Estate (Phuket, Thailand) is the controller for enquiries, consultation bookings, investment requests and analytics gathered through the English version of this website. Processing relies on Articles 6(1)(a), 6(1)(b) and 6(1)(f) of the General Data Protection Regulation.

• Contractual necessity – providing property proposals, organising viewings, drafting brokerage agreements.
• Legitimate interest – IT security, fraud prevention, demand analytics for Phuket real estate.
• Consent – newsletter, remarketing pixels, optional analytics cookies.

2. Categories, retention & transfers

We store identification details (name, email, phone), investment preferences, consultation notes, browser identifiers (IP, cookies) and logs. Records linked to concluded contracts are retained for five years; consent-based marketing data is kept until withdrawal. Hosting takes place in the EU, US and Thailand using SCCs and PDPA-compliant agreements.

3. Cookies & similar technologies

4. Notifications and updates

The Company may send the User notifications about new properties and projects, the Company's services, developer offers and terms, price changes and events in the Phuket property market. Notifications are sent with the User's consent, to the contact details the User has provided, by email, phone, SMS, Telegram and WhatsApp — the latter through the official WhatsApp Business API. Data processing within WhatsApp is additionally governed by the WhatsApp LLC privacy policy.

The User may withdraw consent and stop receiving notifications at any time, free of charge and without giving a reason: by emailing privacy@undersunestate.com with the subject "Unsubscribe", by replying "STOP" to any message from the Company, by using the unsubscribe link in any email, or by telling their manager. The Company stops sending immediately and records the request. Withdrawal does not affect the lawfulness of processing carried out before it.

Consent is voluntary and does not affect the scope of services provided. After unsubscribing, the Company will only send messages relating to the User's enquiry or an active agreement: replies to requests, appointment confirmations, documents and transaction status.

5. Your GDPR rights

You may exercise access, rectification, erasure, portability, restriction and objection rights by emailing privacy@undersunestate.com. You also have the right to complain to your local Data Protection Authority.