Privacy Policy

1. Introduction

Willowframe ("we", "us", "our") is committed to handling your personal data with care and transparency. This Privacy Policy explains what data we collect, why we collect it, and how it is used and protected. It applies to all services offered through Willowframe, including enquiries submitted via our website, consultations, and ongoing tenancy support.

Our services are operated from 104 Santitham Road, Tambon Chang Phueak, Mueang, Chiang Mai 50300, Thailand. This policy is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

If you have questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

2.1 Information you provide directly

• Name and email address (from enquiry forms)
• Phone number (optional, if provided)
• Details about your rental needs (duration, budget, preferences)
• Communications exchanged with us by email or phone

2.2 Technical data

• IP address and browser type (collected via analytics cookies, if consented)
• Pages visited and duration of visit
• Referral source

2.3 Legal basis for processing

We process your data on the basis of your consent (for cookies and marketing communications), contract performance (to deliver services you have requested), and legitimate interests (to improve our services and communicate effectively with clients).

2.4 Data retention

Client contact data is retained for up to 24 months following the end of a service engagement. Enquiry data from non-clients is deleted after 6 months. Cookie data is retained for the period specified in our Cookie Policy.

3. How We Use Your Data

Your data is used for the following purposes:

• Responding to enquiries about our rental services
• Delivering the services you have engaged us for (rental search, tenancy support)
• Communicating updates relevant to your tenancy or enquiry
• Improving our website and services through aggregated analytics
• Meeting any legal obligations under Thai law

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include:

• Encrypted storage of personal data
• Access restricted to team members who require it to perform their role
• Secure deletion of data once retention periods have passed
• Regular review of data handling practices

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within the timeframe required by applicable law.

5. Cookies

We use cookies on our website to understand how visitors use the site and to improve the experience. Cookie preferences can be managed through our Cookie Policy page, where you can also adjust or withdraw consent at any time.

6. Your Rights

Under the PDPA and applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data, subject to legal obligations
• Portability — request transfer of your data in a readable format
• Objection — object to the processing of your data for specific purposes
• Withdrawal of consent — withdraw consent to processing at any time
• Complaint — lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, please contact [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external services or resources. Willowframe is not responsible for the privacy practices of those third parties. We recommend reviewing the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. The updated version will be published on this page with a revised "Last updated" date. For significant changes, we will notify active clients directly by email.

10. Contact

For any privacy-related questions or requests, please contact: