PRIVACY NOTICE

English translation · the Thai version prevails

Version dated 4 November 2026

บ้านพร้อม 096-669-6552 (the "Company"), ________________, Tel. 0966696552, Email ________________, Data Protection Officer (if any) ________________

This notice explains how the Company collects, uses and discloses your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

(1) Prospective buyers: name, phone number, LINE ID, Messenger name, nationality, budget, preferred areas and property features, messages, viewing appointments, feedback on properties, and offers.

(2) Loan cases: loan-preparation information and documents you send to our team.

(3) Property owners: name, phone number, LINE, property details, title deed details, photographs of the property, related documents, and the bank account for receiving money that the owner states in the agency agreement (if any).

(4) Transactions: prices, payments, receipts, contracts, and the bank account used to pay or receive refunds as stated in a contract or in proof of payment.

Our system does not record ID card numbers, passport numbers or bank account numbers as separate data. These appear only in signed contracts and in document copies needed for the contract, a loan application, a payment or refund, or registration.

We do not intend to collect sensitive data such as religion, blood type or health data. If you provide a copy of a Thai ID card, please cover the religion and blood type fields (if shown) before sending it. If we receive a document showing such data, we will cover it or not use it.

Directly from you; our website form, Facebook Lead Ads, Messenger and LINE Official Account; calls and meetings; and other relevant persons such as project developers, co-agents or people you authorise.

(1) Answering enquiries, recommending properties, arranging viewings, receiving offers and making reservation, sale or agency agreements: steps at your request before a contract, or performance of a contract (PDPA s.24(3)).

(2) Marketing an owner's property (photos and details): performance of the agency agreement (s.24(3)).

(3) Sales follow-up, team management, fraud prevention and records of which buyer we introduced: the Company's legitimate interests (s.24(5)).

(4) Receipts, accounting, tax, legal registration and compliance with other laws that apply to the Company, such as anti-money laundering law (if applicable): legal obligations (s.24(6)).

(5) Sending data to banks for a loan, disclosing an owner's contact details to co-agents, and sending news or other property offers after the enquiry has ended: your consent (s.19). Giving consent is optional, and refusing does not affect our other services. We ask for consent separately from the other terms of a contract, and consent boxes are never pre-ticked.

We disclose data only as needed to:

(1) the other party to the transaction (buyer, owner, or the developer for project units), including giving the owner the names of prospective buyers we introduced or showed the property to, as evidence of introduction under the agency agreement;

(2) banks or financial institutions for a loan, with your consent;

(3) co-agents, only where the owner has consented under the agency agreement;

(4) the Land Office, lawyers and government authorities for the transfer or as required by law;

(5) our service providers, such as our server provider, LINE and Meta (Facebook/Messenger) for the channel you use. Internal team notifications via LINE and Web Push contain only a title and a link, never a client's phone number.

Property links we send to clients show property information only, never owners' contact details.

Data in our system is stored on a server located in ________________.

☐ No international transfer other than through LINE / Meta services on the channel you choose to contact us.

☐ Data is transferred to ________________ with safeguards under PDPA s.28 or s.29 as follows: ________________

(1) Enquirers who do not buy or sell: kept for ________ months after the last contact, then anonymised.

(2) Transaction data, contracts and receipts: for the periods required by accounting and tax law and the limitation period for contractual claims, in total ____ years.

(3) Owner data: for the term of the agency agreement plus ____ months, for the protection period and commission payment.

You may request access to and a copy of your data, correction, erasure, destruction or anonymisation, restriction of use, objection to use, receipt or transfer of your data to another party (where applicable), and you may withdraw consent at any time without affecting processing before withdrawal. We may refuse a request where the law allows (for example, records we must keep for accounting) and will tell you why. Contact us as in Section 1; we will respond within ____ days.

You may complain to the Office of the Personal Data Protection Committee (PDPC) if you believe we have breached the law.

Staff access is limited by role, each user has an individual account and password, and owners' contact details are never shown on client-facing pages.

Additional measures: ________________

If a data breach occurs, we will notify the PDPC and notify you where the law requires.

We may update this notice and will publish the new version via ________________ with its effective date. Where a change requires consent, we will ask for it again.

This is an English translation. If there is any inconsistency, the Thai version prevails.

Contact: บ้านพร้อม 096-669-6552, ________________, Tel. 0966696552, Email ________________