Privacy Policy

Last updated: TODO

1. Who is responsible

Sakda Phoomphan, trading as Condo Verdict, TODO, Thailand, is the data controller for personal data collected through this website and the Service. Contact: [email protected].

2. What I collect

(a) Payment and order data: name, email, billing country, payment amount and status, the package you bought, and a traffic-source code (so I know which link brought you). Card details are handled by Stripe; I never see your full card number.

(b) Intake data: your name, email, the property listing and its details, your goals and concerns, and any documents you choose to upload (for example a draft contract). I ask for your nationality only to check foreign-ownership rules that apply to condominium units. Please do not upload passport numbers, national ID numbers or bank account numbers; I do not need them.

(d) Website data: My hosting provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the website.

Providing the data in (a) and (b) is necessary for me to deliver the Report. Without it I cannot provide the Service.

3. Why I use it, and the legal basis

To deliver the Report you paid for and communicate with you (performance of a contract).
To take payment, keep accounting records and meet tax obligations (contract; legal obligation).
To process your intake data and documents with AI-assisted tools when drafting the Report (performance of a contract, and your consent given on the intake form).
To understand which channels bring customers and improve the website, using aggregated data (legitimate interests).
To ask whether you'd be willing to give feedback or a testimonial (legitimate interests). I publish a testimonial only with your explicit written permission.

I do not sell your data and do not use it for advertising.

4. Who I share it with

Only service providers needed to run the Service:

Stripe (payments)
Tally (intake form and file uploads)
Google (Gmail and Google Drive, for email and document storage)
Cloudflare (website hosting and email forwarding for [email protected])
Anthropic (AI assistance used in drafting Reports). TODO

Some of these providers process data outside Thailand, including in the United States and the European Union. I use the providers' standard data processing terms where available.

I may also disclose data where required by law.

5. How long I keep it

Uploaded documents and intake details: deleted 60 days after your Report is delivered, unless you ask me to delete them sooner or a dispute is open. This includes copies in Tally, email, cloud storage and AI tool history.
Your Report: kept for 2 years so I can answer follow-up questions and handle any complaint, then deleted.
Payment and accounting records: kept as long as Thai accounting and tax law requires (currently understood to be 5 years).

6. Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or object to the use of your personal data, to receive a copy in a portable format, and to withdraw consent where processing is based on consent (withdrawing consent does not affect past processing). Email [email protected]. I will reply within 30 days. You may also complain to the data protection authority in Thailand (the Personal Data Protection Committee) or in your country.

7. Security

I store files in access-controlled accounts with two-factor authentication and limit access to myself. If a data breach is likely to put your rights at risk, I will notify the authorities and you as the law requires.

8. Children

The Service is not for people under 18, and I do not knowingly collect their data.

9. Changes

I'll post any changes on this page with a new date.