How we use personal information

This is an operational draft. The data controller’s name, address, rights-request contact and approved retention periods must be added before commercial use.

Information collected

Owner or representative information includes name, email, phone, messaging details, address, last four document digits, property details, photos and declarations. Buyer information includes name, email, phone, messages, properties of interest and follow-up history.

Purposes and legal bases

We use information to receive requests, perform preliminary checks, prepare and administer agreements, publish listings, coordinate parties, prevent fraud, maintain security, comply with the law and exercise legal claims. Depending on the circumstances, the basis is consent, requested steps or contractual performance, legal obligations or legitimate interests.

Publication and sharing

Public pages do not display owner phone numbers, email, LINE, WhatsApp, private addresses or full title document numbers. Necessary information may be shared with transaction parties, lawyers, property inspectors, system providers and authorities when there is a lawful basis.

Retention and security

Pending listings and files are kept private. Back-office access is restricted and status changes are logged. A schedule for deleting unnecessary information should be established. Contract and accounting records may need to be retained for statutory periods.

Your data rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability, object to processing or withdraw consent. You may also complain to the Office of the Personal Data Protection Committee.

Contact

Before launch, the data controller’s email, address and rights-request contact must be specified. During testing, contact the PaiPah admin team through the shop’s main contact channel.