Privacy Policy

1. Introduction

Sirocco ("we", "us", "our") is committed to protecting the personal information of everyone who contacts us or uses our luxury residence concierge services in Thailand. This policy explains what data we collect, why we collect it, how it is used, and your rights in relation to it.

This policy applies to information collected through our website at sirocc.club, by telephone, by email, and in the course of providing our services. If you have questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number
• Enquiry details: your requirements, preferences, budget range, and any other details you share with us
• Correspondence: records of calls, messages, and emails
• Website data: pages visited, time on site, browser type, and IP address (collected via cookies and analytics tools)

We do not collect sensitive personal data such as financial account details, passport numbers, or health information unless you specifically provide these in the course of our work together.

3. How We Collect Data

We collect data in the following ways:

• Through the enquiry form on our website
• By telephone and email correspondence
• During in-person consultations
• Automatically via cookies and analytics tools when you visit our website

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Contract performance: to provide the services you have engaged us for
• Legitimate interests: to respond to enquiries and improve our services
• Consent: for marketing communications and optional cookies (which you may withdraw at any time)
• Legal obligation: where required by applicable law in Thailand or other relevant jurisdictions

5. How We Use Your Data

Your personal data is used to:

• Respond to your enquiry and provide the services you have requested
• Prepare property shortlists, coordinate viewings, and manage tenancy processes
• Contact you about your engagement with Sirocco
• Send you service-related communications (with your consent, marketing updates)
• Improve our website and understand how it is used
• Comply with legal and regulatory requirements

We do not sell your personal data and do not share it with landlords, property agents, or third parties without your explicit consent, except where strictly necessary to deliver the service you have engaged.

6. Data Retention

We retain personal data for as long as necessary to provide the services requested and comply with our legal obligations. Typically:

• Enquiry records: up to 12 months from last contact if no engagement followed
• Client records: up to 5 years from the end of the engagement, in line with applicable contractual and statutory requirements
• Website analytics data: retained according to the third-party platform's default settings (typically 14 to 26 months)

7. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal information from unauthorised access, disclosure, or loss. These include:

• Encrypted storage and transmission of personal data
• Access restricted to Sirocco team members who require it for their role
• Regular review of our data handling practices
• Prompt notification in the event of a data breach affecting your rights

8. Cookies

Our website uses cookies to operate correctly and to help us understand how visitors use the site. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Third-Party Services

We may use the following third-party services, each of which has its own privacy policy:

• Google Analytics: website usage statistics
• Google Maps: embedded map on our website (no personal data shared)
• Email service provider: for delivering communications

We do not embed social media tracking pixels by default. Where we introduce any third-party service that processes personal data, we will update this policy accordingly.

10. Your Rights

Depending on your location and applicable law (including Thailand's Personal Data Protection Act B.E. 2562 and, where relevant, the GDPR for EU residents), you have the following rights:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to request deletion of your data (subject to legal obligations)
• The right to object to or restrict certain processing
• The right to data portability (where technically feasible)
• The right to withdraw consent at any time, without affecting processing already completed
• The right to lodge a complaint with the relevant supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

12. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we hold data about a minor, please contact us immediately.

13. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website or services following an update constitutes acceptance of the revised policy.

14. Contact

For data-related enquiries, please contact: