Privacy Policy

1. Introduction

Ironbark ("we," "us," "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect, how we use it, and what choices you have. It applies to all individuals who contact us, use our services, or visit our website.

Our principal place of business is: 89 Rawai Beach Road, Rawai, Mueang Phuket, Phuket 83130, Thailand. For privacy-related enquiries, contact us at: privacy@ironbarexas.

2. What Data We Collect

We collect only the information necessary to provide our services and respond to enquiries:

• Contact information: Name, email address, and phone number provided via our contact form or direct communication.
• Service-related information: Rental preferences, budget, intended stay duration, and lifestyle factors shared during our initial consultation.
• Property information: For guardianship clients, details about your rented property including address and access arrangements.
• Website usage data: Pages visited, browser type, and general location data collected via cookies and analytics tools, where consent is given.

3. How We Use Your Data

We use personal data for the following purposes, each with a corresponding legal basis:

• Service delivery (contractual necessity): Matching rental preferences, conducting property searches, coordinating guardianship visits.
• Communication (legitimate interest): Responding to enquiries, sending property shortlists, sharing guardianship reports.
• Service improvement (legitimate interest): Understanding how clients use our website to improve usability and content.
• Legal compliance (legal obligation): Maintaining records required under Thai business law and relevant data protection regulations.

We do not use personal data for automated decision-making or profiling.

4. Data Retention

Client records are retained for five years following the conclusion of a service engagement, in accordance with Thai commercial record-keeping requirements. Enquiries that do not proceed to a service are deleted within twelve months. Website analytics data is retained for twenty-four months before aggregation and anonymization.

5. Data Sharing

We share personal data only as necessary to deliver our services:

• Landlords and property managers: Contact details shared when a property viewing or tenancy is being arranged, with your knowledge.
• Maintenance providers: For guardianship clients, limited details may be shared with vetted cleaning or pest control contractors.
• Analytics services: Aggregated, anonymized website usage data may be processed by analytics providers. No personal identifiers are shared.

We do not sell, rent, or trade personal data to any third party for marketing or commercial purposes.

6. Data Security

Personal data is stored on password-protected systems with restricted access limited to team members who require it to perform their work. All electronic communications containing sensitive information use encrypted channels. We review our security practices regularly and respond promptly to any identified vulnerabilities.

7. Cookies

We use cookies for essential website functionality and, where consent is given, for analytics purposes. You can manage your cookie preferences at any time through our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect your ability to use the site or our services.

8. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable international frameworks, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where it is no longer necessary for the purpose it was collected.
• Data portability: Request your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@ironbarexas. We aim to respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us and we will remove it promptly.

11. Policy Updates

We may update this policy periodically. Where changes are material, we will notify active clients directly. Continued use of our services following an update constitutes acceptance of the revised policy. The date at the top of this page indicates when it was last revised.