Privacy policy
Effective 1 July 2026 · applies under Thailand's PDPA and, for EEA/UK visitors, GDPR1. Who we are
PhuVillas (phuvillas.com) is a property listings aggregator based in Phuket, Thailand. PhuVillas acts as the data controller for all information collected on this site. For privacy questions or requests: use the contact page.
2. What we collect
When you submit an enquiry we record your name, your preferred contact method (WhatsApp, email, etc.), the message you send, and which listing or page prompted it. If you email a saved list to yourself we record that email. No account sign-up is needed. Your saved homes, comparison lists, currency and language picks, and browsing history all stay in your device's local storage; we never receive them. We retain basic server logs (IP, browser info) for security purposes.
3. How enquiries are handled
Your enquiry message is sent to the partner agency representing that specific property so they can respond. That agency acts as an independent data controller for fulfilling your request. We do not sell, rent, or share your contact information beyond that one agency and our essential service providers (servers, email systems).
4. Legal bases (PDPA / GDPR)
We process enquiry data to honour requests you make prior to purchasing. Analytics data is only gathered with your explicit consent via the cookie banner; you can opt out with zero impact on site functionality. We don't deploy automated decision systems and we don't handle sensitive personal data categories.
5. How long we keep data
Enquiry records are retained for up to 24 months to uphold the 24-hour response promise and resolve issues, then purged or stripped of identifiers. Server security logs stay for 12 months. Your device-side data (saved homes, preferences) persists until you clear your browser.
6. Your rights
PDPA and GDPR grant you rights to: access your stored data, correct inaccuracies, request deletion, object to or limit processing, withdraw consent, and receive your data in portable format. Email us and we respond within 30 days. If you're in the EEA or UK you can escalate to your national data regulator; Thai residents can contact the PDPC.
7. Data transfers & questions
Some of our hosting partners operate servers outside Thailand or the EEA; we rely on their contractual data protection guarantees. Have questions or need to submit a data request? Use the contact page and include "Privacy Request" in your subject.
Converted prices are approximate. Listing data comes from partner agencies. Nothing here is legal advice.