Privacy Policy

1. Who we are

This Privacy Policy explains how NCAP Agency & Property Co., Ltd. ("NCAP", "Solene", "we", "us") collects, uses, and protects your personal data when you visit this website or contact us about our villas.

NCAP Agency & Property Co., Ltd. is the data controller responsible for your personal data.

Registered office: 76/177 Platinum Residence Park, Rawai, Mueang Phuket District, Phuket 83130, Thailand.

Contact for privacy matters: chok00897@gmail.com.

2. Information we collect

We collect only the information we need to respond to you and operate this website:

• Contact details you provide — such as your name, email address, phone number, and message — when you submit an enquiry or contact form.

• Property preferences you share with us, such as budget, location, or dates.

• Technical data — such as IP address, browser type, and pages viewed — collected automatically through essential cookies and server logs.

We do not knowingly collect any special categories of data (for example, health, race, or political opinions).

3. How we use your information

We use your personal data to:

• Respond to your enquiries and arrange villa viewings, rentals, or purchases.

• Provide, maintain, and secure this website.

• Comply with our legal and accounting obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

4. Legal basis for processing (PDPA & GDPR)

If you are in Thailand, the European Economic Area (EEA), or the United Kingdom, we process your personal data on the following legal bases under the PDPA and the GDPR:

• Consent — for non-essential cookies and any marketing communications.

• Legitimate interests — to respond to your enquiries and keep our website secure.

• Contract — where processing is necessary to take steps at your request before entering into a rental or sale agreement.

• Legal obligation — where we must retain records for tax or regulatory reasons.

5. Cookies

This website uses cookies and similar technologies:

• Strictly necessary cookies keep the site working — for example, remembering your language preference and securing the admin area. These do not require consent.

• Analytics cookies (if enabled) help us understand how the site is used. We only set these with your consent.

You can accept or decline non-essential cookies using the cookie banner, and change your choice at any time via "Cookie settings" in the footer.

6. How we share your information

We share personal data only with trusted service providers who process it on our behalf under appropriate agreements:

• Supabase — database and authentication hosting.

• Vercel — website hosting and delivery.

We may also disclose data where required by law or to protect our legal rights. We never sell your personal data to third parties.

7. International data transfers

Our service providers may process data on servers located outside Thailand, including in the European Union and the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

8. Data retention

We keep enquiry and contact data only as long as necessary to respond to you and to meet our legal obligations, after which it is deleted or anonymised. Accounting and transaction-related records are retained for 5 to 10 years, in line with the retention periods required by Thai accounting and tax law.

9. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete data.

• Request deletion of your data (the "right to be forgotten").

• Object to or restrict certain processing.

• Withdraw consent at any time.

• Data portability.

If you are a California resident, you also have rights under the CCPA, including the right to know, delete, and opt out of the "sale" of personal information (we do not sell your data). To exercise any of these rights, contact us at chok00897@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We use appropriate technical and organisational measures — including encryption in transit and access controls — to protect your personal data against loss, misuse, or unauthorised access. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

11. Children's privacy

This website is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated where appropriate.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

NCAP Agency & Property Co., Ltd.

76/177 Platinum Residence Park, Rawai, Mueang Phuket District, Phuket 83130, Thailand

Email: chok00897@gmail.com

Phone: +66 97 310 1570