Legal
Privacy Policy
Last updated: April 30, 2026
Burapha Corporation Co., Ltd. ("BC", "we") respects your privacy. This policy explains how we collect, use, and protect your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data we collect
- Directly from you: name, phone, email, messages submitted via forms, property details for valuation, identity documents at contract signing.
- Technical data: IP address, user agent, usage data via cookies and similar technologies (see Cookie Policy).
- From external sources: property data from the Land Department or independent appraisers, when needed for deal evaluation.
2. Purposes
- Provide the requested services, evaluate loans, draft contracts, support customers.
- Comply with law (KYC, AML, mandated credit checks).
- Reach out and send relevant information (with consent).
- Analyze and improve services, security, and fraud prevention.
3. Legal basis
We process data on the basis of: consent, contractual necessity, legal obligation, and legitimate interest (e.g., fraud prevention).
4. Sharing
We share data with: affiliates, processors acting on our behalf (cloud, email providers), property appraisers, deal investors (anonymized), and government agencies when required by law. We do not sell your data for marketing purposes.
5. Retention
We retain data only as long as necessary for the stated purposes or as required by law. Inquiry data without contract is retained up to 24 months. Customer data is retained per applicable law.
6. Your rights
Under PDPA you have the right to:
- Access and obtain a copy of your data
- Correct inaccurate data
- Erasure (subject to legal conditions)
- Object to processing in certain cases
- Withdraw consent (without affecting prior processing)
- Lodge a complaint with the Personal Data Protection Committee
7. Security
We employ appropriate technical and organizational measures — encryption, access controls, regular security audits — to prevent unauthorized access, disclosure, alteration, or destruction.
8. International transfers
Some cloud providers may process data outside Thailand. We ensure adequate data protection standards in such cases.
9. Data Protection Officer (DPO)
To exercise rights or for questions, contact:
Data Protection Officer (DPO)
Email: dpo@burapha.co.th
Address: Burapha Corporation Co., Ltd. · Bangkok, Thailand
10. Updates
This policy may be updated periodically. We will post updates on this page and revise the "Last updated" date above.