General Privacy Statement
exaimax operates exaimax.digital. This privacy statement explains how we collect, use, disclose and protect personal data in connection with our property transaction services. We process personal data to perform contracts, meet legal obligations and manage client relationships in accordance with applicable law.
Definitions
Key terms used in this policy:
Data Collection
We collect personal data provided directly by users and data generated automatically during site use, as necessary to deliver our services and meet legal requirements.
User-Provided Data
Data you supply when requesting services, creating an account, or contacting us:
- Full name and contact details (email, phone, mailing address)
- Identification documents and business registration information when required for transactions
- Property details, contractual preferences and transaction instructions
- Business information needed for settlement and payment processing
- Communications and correspondence records between you and exaimax
- Consents and declarations related to legal and regulatory compliance
Automatically Collected Data
When you visit exaimax.digital we may collect technical and usage data automatically:
- IP address and device identifiers
- Browser type, operating system and site navigation logs
- Cookies and similar tracking technologies
- Referring URL and pages viewed
- Time stamps and frequency of interactions
- Geolocation data where provided by the device or browser
Third-Party Sources
We may receive personal data from third parties when necessary for a transaction or service delivery:
- Legal representatives and attorneys acting on your behalf
- Business institutions and escrow providers for settlement processing
- Government agencies and Land Offices for registration and compliance checks
Purposes of Processing
We process personal data for the following legitimate purposes:
- To perform contractual obligations related to property transactions
- To comply with legal and regulatory obligations in Thailand
- To communicate with clients and respond to inquiries
- To maintain records and support dispute resolution or audits
- To improve our website functionality and user experience through analytics
- To manage payments, billing and tax reporting
- To detect and prevent fraud, abuse or security incidents
- To process marketing communications where consent has been provided
Legal Bases for Processing
We rely on applicable legal bases to process personal data depending on the purpose:
- Performance of a contract with the data subject
- Compliance with a legal obligation under Thai law
- Legitimate interests of exaimax, such as fraud prevention and service improvement, balanced against user rights
- User consent for certain marketing or analytics activities where required
European Data Protection Principles
When GDPR applies, the following rights are recognized and can be exercised as described:
- Right to access personal data we hold about you
- Right to rectify inaccurate or incomplete data
- Right to erasure where processing is not legally required
- Right to restrict or object to certain processing activities
- Right to data portability where processing is based on consent or contract
- Right to lodge a complaint with a supervisory authority in applicable jurisdictions
Cookies and Tracking
We use cookies to provide basic site functionality, analyze usage and deliver tailored content. You can control cookie preferences through your browser or our cookie settings.
Types of cookies used include essential cookies, performance and analytics cookies, and preference cookies.
Essential cookies enable site operation; analytics cookies help us understand usage; preference cookies store user settings.
To manage cookies, adjust your browser settings or use the cookie preference tool on the site. Disabling non-essential cookies may affect functionality.
Read our Cookie Policy
Data Sharing and Disclosure
We share personal data only as necessary to provide services, meet legal requirements and protect legal interests.
- Service providers and contractors assisting with transaction processing
- Business institutions and payment processors involved in settlements
- Government bodies, Land Offices and tax authorities as required by law
- Legal advisors and auditors engaged to support governance and compliance
- Third parties in connection with corporate transactions, subject to confidentiality safeguards
- Other parties with your explicit consent or as authorized by law
International Data Transfers
Personal data may be transferred to service providers or partners outside Thailand when necessary for service delivery. Transfers occur under appropriate safeguards and contractual protections.
We implement contractual clauses, data processing agreements and access controls to protect data when transferred internationally.
Data Retention
We retain personal data only as long as necessary for the intended purposes and to meet legal obligations.
Account and client records are retained for the duration of the commercial relationship and for statutory retention periods under Thai law.
Communications and correspondence are retained for recordkeeping and dispute resolution in accordance with internal retention schedules.
Technical logs and analytics data are retained for operational security and performance monitoring for defined periods.
When retention periods expire or upon valid request, we securely delete or anonymize personal data unless retention is required by law.
Security Measures
We implement administrative, technical and physical controls to protect personal data against unauthorized access, disclosure, alteration or destruction. Security measures are periodically reviewed and updated.
- Access controls and role-based permissions
- Encryption of sensitive data in transit and at rest where appropriate
- Regular security assessments, patching and incident response planning
User Rights
How to exercise your rights:
- Submit a written request to our data protection contact specifying the right you wish to exercise and supporting details.
- We will respond within a reasonable period and provide instructions for verification, subject to legal exceptions.
- Right to request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to applicable legal retention requirements and legitimate business needs.
- Right to restrict processing where accuracy is contested, processing is unlawful but erasure is not requested, or where data is needed to establish, exercise or defend legal claims.
- Right to data portability for personal data provided directly to exaimax in a structured, commonly used and machine-readable format, when processing is based on consent or contract and carried out by automated means.
- Right to object to processing of personal data for direct marketing purposes or where processing is based on legitimate interests, subject to assessment of overriding grounds for processing.
- Right to withdraw consent for processing activities that rely on consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to lodge a complaint with a competent supervisory authority if you consider that processing of your personal data infringes applicable data protection laws in Thailand.
Exercising your privacy rights
To exercise any of the rights above, submit a request through the contact form available on exaimax.digital or send a written request to our registered address. Include sufficient identification information and a clear description of the request so we can locate the relevant data. We may request additional information to verify your identity before taking action to protect your data and the rights of others.
contact@exaimax.digital
We aim to acknowledge receipt of privacy requests promptly and to provide a substantive response within 30 calendar days of verification. Complex requests or those requiring coordination with third parties may take longer; in such cases we will keep you informed of the expected timeline.
Marketing communications and choices
exaimax may send informational or promotional communications about services related to real estate transactions if you have opted in or where permitted by law. Marketing messages will include an easy mechanism to opt out. We use segmentation and relevance filters to limit the frequency and improve the relevance of communications.
To stop marketing communications, use the unsubscribe link in any promotional message, update your preferences at exaimax.digital/preferences, or contact our data protection team via the contact details below. Unsubscribe requests will be processed in a timely manner; transactional messages necessary for a service will still be sent where required.
Children's privacy
Our services are intended for adults and commercial users engaged in property transactions. exaimax does not knowingly collect personal data from children under the age of 18. If we become aware that we have collected personal data of a child without appropriate parental consent, we will take steps to delete that information promptly.
Links to third-party websites
exaimax.digital may contain links to third-party websites and services for convenience. We do not control or endorse their content or privacy practices. When you access external sites, we recommend reviewing their privacy policies and terms before providing personal data.
Changes to this privacy policy
We periodically review and update our privacy policy to reflect changes in our operations, legal requirements, or technology. Material changes will be posted on exaimax.digital with an updated effective date. The current version of this policy was adopted on 13-06-2026; routine clarifications and minor updates may be posted without prior notice.
Data Protection Contact
For privacy inquiries, data subject requests or questions about this policy, contact: exaimax, Tako Sub District, Amphoe Thung Tako District, Chumphon Province 86220, Thailand. Phone: +66993183723. Business ID: 6593355726961. You may also use the contact form at exaimax.digital/contact to submit verified requests; include your full name, contact details, and a description of the request.