Privacy Policy
Last updated: 10 March 2026
SabaiNest is a trading name of Siam Strategic Partners Limited ("we", "us", or "our"). We are committed to protecting your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website at sabainest.com and our apartment matching services.
1. Data Controller
Siam Strategic Partners Limited is the data controller responsible for your personal data.
- Company: Siam Strategic Partners Limited
- Trading name: SabaiNest
- Email: hello@sabainest.com
- Website: sabainest.com
For any data protection enquiries or to exercise your rights under the PDPA, please contact us at hello@sabainest.com.
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Contact and Identity Information
- Full name
- Email address
- Telephone number
- LINE ID or other messaging platform identifiers
2.2 Preferences and Requirements
- Preferred location, budget, and apartment features
- Length of stay and move-in dates
- Purpose of stay (e.g. remote work, medical visit, corporate assignment)
- Any specific accessibility or lifestyle requirements you share with us
2.3 Identity Documents (for Booking)
- Passport or national ID card copy
- Visa or work permit details (where applicable)
Identity documents are classified as personal data under the PDPA. We collect these only when you proceed with a booking and require your explicit consent before doing so.
2.4 Payment Information (Future)
- Payment details may be collected via third-party payment processors in the future. We will update this policy before collecting any payment data.
2.5 Technical and Usage Data
- IP address, browser type, device information
- Pages visited, time spent on pages, referring URLs
- Cookie identifiers and similar tracking data (see Section 8)
3. How We Collect Your Data
We collect personal data through:
- Direct interactions: When you contact us via our website form, email, LINE, or phone
- Our website: Automatically through cookies and similar technologies when you browse our site
- Booking process: When you provide identity documents and booking details
- Third-party tools: Analytics and marketing platforms that collect usage data on our behalf
4. Purposes and Legal Bases for Processing
Under the PDPA, we process your personal data based on the following legal bases:
| Purpose | Legal Basis (PDPA) |
|---|---|
| Responding to your enquiries and matching you with suitable apartments | Performance of a contract / steps prior to entering a contract (Section 24(3)) |
| Processing bookings and verifying your identity | Performance of a contract (Section 24(3)) |
| Collecting and storing identity documents | Explicit consent (Section 26) |
| Sending you updates about properties that match your preferences | Legitimate interest (Section 24(5)) |
| Sending marketing communications and newsletters | Consent (Section 19) |
| Analysing website usage to improve our services | Legitimate interest (Section 24(5)) |
| Complying with legal obligations (e.g. tax, record-keeping) | Legal obligation (Section 24(6)) |
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients:
- Property owners and managers: We share your name, contact details, and stay requirements with property owners when matching you with an apartment. Identity documents are shared only with your consent as part of the lease process.
- Service providers: Third-party companies that help us operate our business, including:
- Website hosting and infrastructure (e.g. Vercel)
- Analytics services (e.g. Google Analytics)
- Email marketing platforms
- Customer relationship management (CRM) tools
- Legal and regulatory authorities: Where required by Thai law or valid legal process
All third-party service providers are required to process your data only on our instructions and in accordance with applicable data protection laws.
6. International Data Transfers
Some of our third-party service providers operate outside Thailand. When your personal data is transferred internationally, we ensure that adequate protection is in place as required by the PDPA, including:
- Transferring data only to countries with adequate data protection standards as recognised by the PDPA Committee
- Implementing appropriate contractual safeguards with our service providers
- Obtaining your consent for transfers where required
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Enquiry and contact data | 2 years from last contact, or until you request deletion |
| Booking and transaction records | 5 years (Thai tax and accounting requirements) |
| Identity documents | 1 year after the end of your stay, then securely deleted |
| Marketing consent records | Until you withdraw consent |
| Website analytics data | 26 months (Google Analytics default) |
After the retention period expires, we will securely delete or anonymise your data.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. These fall into the following categories:
- Essential cookies: Required for the website to function properly (e.g. navigation, security). These do not require consent.
- Analytics cookies: Help us understand how visitors use our website (e.g. Google Analytics). These collect anonymised usage data.
- Marketing cookies: Used to deliver relevant content and measure the effectiveness of our marketing campaigns.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
9. Your Rights Under the PDPA
As a data subject under the PDPA, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to restriction: Request that we limit how we process your data
- Right to data portability: Request your data in a structured, commonly used, machine-readable format
- Right to object: Object to processing based on legitimate interest or for direct marketing purposes
- Right to withdraw consent: Withdraw any consent you have previously given, at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint: File a complaint with the Personal Data Protection Committee (PDPC) if you believe your rights have been violated
To exercise any of these rights, please contact us at hello@sabainest.com. We will respond to your request within 30 days.
10. Children and Minors
Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor without appropriate parental or guardian consent, we will take steps to delete that data promptly.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (SSL/TLS)
- Access controls limiting who can view your personal data
- Secure storage of identity documents with restricted access
- Regular review of our security practices
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will post the updated policy on our website with a revised "Last updated" date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint about how we handle your personal data, please contact us:
- Email: hello@sabainest.com
- LINE: @sabainest
You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you are unsatisfied with our response.