Legal

Privacy Policy.

How we handle your data. Terms of Use →

In force

This is BAANLYY's operative Privacy Policy. BAANLYY is operated by BAANLYY LLC ("BAANLYY", "we"), a company formed in the State of Nevada, USA, serving properties, suppliers and users in Thailand; the Terms of Use set out which body of law applies to what. Version 5, effective 3 October 2026.

Draft - pending legal review

The Should I Move quiz and Life Profile section below is new. The rest of this policy is in force as stated above.

1. What we collect

We collect information you provide (name, email, phone, LINE/WhatsApp, messages, enquiry details, account type/role, your recorded acceptance of these policies, account and listing-submission data, agent profile and verification data, and images you upload) and information collected automatically (device, pages viewed, listings viewed, IP, cookies and similar technologies).

2. How we use it

To operate the platform; respond to and route your enquiries; create and manage accounts, listings and agent profiles; provide our CRM; improve the service; and, where permitted, for marketing, analytics and advertising.

3. Leads & lead routing

When you submit an enquiry or contact form, your details form a "lead". Leads are routed as follows: general site, area, tower and unclaimed-listing leads go to BAANLYY admin; leads from an agent's listing or agent profile go to that agent; leads from an owner's listing go to that owner. BAANLYY administrators can view all leads for quality, oversight and reassignment. Recipients may contact you about your enquiry.

4. CRM storage

Leads and related notes, statuses, tasks and reminders are stored in our customer-relationship tools to manage follow-up. Agents and owners can access leads routed to them; admin can access all.

5. Contact permissions

By submitting a form you consent to being contacted about your enquiry by email, phone, SMS, WhatsApp or LINE, by BAANLYY and/or the relevant agent or owner, where lawful. You can opt out at any time.

6. Cookies, pixels, analytics & advertising

We use cookies and similar technologies, web analytics (e.g. Google Analytics), and advertising/retargeting pixels (e.g. Meta, Google Ads, TikTok) to understand usage and to show relevant ads on third-party platforms. Non-essential cookies and pixels are used only with your consent via our cookie banner.

7. Data sharing

We share lead and contact data with the listing agent or owner to whom your enquiry is routed. We use service providers (hosting, email, analytics, advertising, payments) under appropriate safeguards. We do not sell your personal data.

8. Retention

We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. Three categories have a stated period rather than a general one, because a general answer is not much use for any of them:

• Government-issued photo ID supplied for verification — 24 months from approval, then deleted automatically. A scheduled process deletes the file itself. What remains afterwards is the record of the check: which kind of document it was, the date it was uploaded, who reviewed it, and a SHA-256 fingerprint of the file. That record contains no image and no extracted content, and it is kept indefinitely so a verification can still be evidenced if it is later disputed. Note for Thai nationals in particular: a copy of a Thai national ID card carries religion and blood type, which are sensitive personal data under PDPA section 26. That is the reason the image has a fixed end date instead of being kept as long as the account.
• Company registration documents, title deeds and other proof of ownership or authority — kept for as long as the verification they support is displayed, and deleted when it is withdrawn. These are the basis on which a supplier is shown as verified, and that basis can be questioned years after the check.
• Acceptance records for these documents — kept indefinitely, including superseded ones, as section 9 describes.

You can ask us to delete your verification documents at any time; doing so removes the verification badge they support.

9. Account type, role & consent records

When you create an account you choose a role — consumer (renter, buyer, investor or seller) or agent/landlord — which tailors your experience, and an account may hold both. We record your account type to operate role-based features and to switch you between the consumer view and the agent/landlord listing portal.

The acceptance record. Each time you accept our Terms of Use or this Privacy Policy — at sign-up, and again whenever we publish a materially updated version — we store a record of that acceptance. It contains: which document you accepted and its version number; the date and time; the IP address the acceptance was submitted from; and your browser's user-agent string. We keep superseded acceptances alongside current ones, so it remains possible to establish which version applied at a given moment.

Why, and on what basis. An IP address is personal data, and we collect it here for one narrow purpose: to evidence that an agreement was actually given, by whom, and when — which is the only thing that makes a consent record worth keeping. We rely on the necessity of performing our contract with you, together with our legitimate interest in being able to demonstrate agreement in a dispute. This data is never used for advertising, profiling, tracking you across the site, or building any behavioural record; it is written once when you click accept and read only when someone asks what was agreed. You may request a copy of your own acceptance history at any time (see “Your rights” below).

10. Listing verification data

For agents and landlords, we may collect and process identity, ownership or authority information to verify listings before they are published, to protect platform integrity and prevent fraudulent or unauthorised listings. This information is used for verification and compliance only. Retention differs by document type and is set out in full in section 8 above — in short, a government photo ID is deleted 24 months after approval and the record of the check outlives it, while ownership and company documents are kept while the verification they support is displayed.

11. AI tools

Our AI-assisted tools (such as the Content Studio and AI Prompt & Image Library) generate content from inputs you enter. We process those inputs to provide the output; do not enter another person's personal data into these tools without a lawful basis.

12. Images & watermarking

Images you upload are processed to display and market the relevant listing. When an image is downloaded from a listing, we may apply a BAANLYY watermark to the file. We do not use uploaded listing images to identify individuals.

13. Your rights

Subject to Thailand's PDPA (and GDPR-style protections where applicable), you may request access, correction, deletion, restriction, objection, or withdrawal of consent. Contact privacy@baanlyy.com. For step-by-step deletion instructions, see our data deletion page.

14. International users & Thailand PDPA

BAANLYY is owned and operated by BAANLYY LLC (a Nevada, USA company), and serves users in Thailand, applying Thailand's Personal Data Protection Act (PDPA). International users' data may be processed in Thailand, the US and by our service providers. We apply PDPA principles and recognised international safeguards.

15. Contact

Questions or requests: privacy@baanlyy.com — BAANLYY LLC (a Nevada, USA company).

Should I Move? quiz and your Life Profile

The Should I Move quiz asks who is moving (just you, two of you, or a family, and if a family how many children under 18), whether you have pets, what work looks like, whether you want to rent or buy and when, what you can spend (monthly rent, a purchase budget, and other monthly living costs), how many bedrooms you want, what matters to you (beaches, quiet, nightlife, family life, getting around, lower cost, hospitals nearby, remote work, food, day-to-day safety, walking, and the expat scene), side choices (coast or city, quiet or lively, walk or drive), the language you use day to day, and where you are now.

You can take the quiz without an account. When anyone finishes the quiz, we store the answers and the resulting scores in a Move Score row so we can show a public link. That public page shows only the score, the top city and the top neighbourhood — not the answers or budgets. If you were signed in, that row is tied to your account; if you were not, it is stored without an account. The quiz also sends event names (started, answered a step, saw results, clicked a listing) to our analytics. Those events do not include your answers.

A Life Profile is a copy of those same answers on your account. If you are signed in when you finish the quiz, we write those answers to your Life Profile. You can download it (GET) or delete it (DELETE) at /account/life-profile. Deleting removes that Life Profile row. Deleting also removes Move Score rows attached to your account.

The answers we store on a Life Profile are only these: household; children; pets; work; rent or buy; timeframe; monthly rent in THB; purchase budget in THB; lifestyle budget in THB; bedrooms; current country; current city; priorities (beaches, nightlife, quiet, family, transit, affordability, healthcare, remote work, dining, safety, walkability, community); preferences (coast or city, quiet or lively, walk or drive); and languages. We do not keep extra keys.

The Life Profile is tied to your account. Only you can read it. We do not give it to agents, employers or advertisers. We store it so we can show you a Move Score and, if you keep a Life Profile, reuse those answers in our other tools. It is stored because you finished the quiz while signed in, or because you saved it on your account, and you can withdraw that by deleting it. If you then send an enquiry from the results page, that enquiry includes a summary of your answers plus the name, email and phone you typed, and is handled like any other enquiry on this site.