How we handle your data
Version 27 September 2026
Key to Samui helps homeowners on Koh Samui and Thai buyers meet on a genuine sale and a registered lease. This page explains what we collect, why, who sees it and what you can ask of us.
What we collect
- What you give us in our forms, questionnaires, chat and portal: your name, email, phone or WhatsApp number, your answers about your property or your purchase, messages, and documents you upload.
- For Thai buyers, only inside the portal: copies of identity or company documents and evidence of funds, so we can check that a buyer is eligible and buys with their own money.
- Basic technical data: the page you came from, marketing tags in the link you used, and your IP address for security and to limit abuse.
- We never ask for ID numbers, bank account numbers or passwords in forms or chat.
Why we use it
- To reply to you and follow up on your enquiry, with your consent.
- To run your case or your buyer profile once you ask us to: reviewing documents, arranging the valuation, preparing a listing, and coordinating with the lawyers involved.
- To meet legal duties, for example checks on the source of funds where the law requires them.
Who sees it
- Our small team, and only what each person needs.
- With your agreement, the independent licensed Thai lawyer and the independent valuer involved in your case.
- The AI advisor on our website is powered by Google's Gemini service. What you type in the chat is processed by Google, including outside Thailand. Please do not type ID numbers or bank details in the chat.
- We do not sell your data, and we do not share it for anyone else's marketing.
How long we keep it
- Enquiries that do not become a case: up to 12 months, then anonymised.
- Chat conversations that do not lead to an enquiry: up to 90 days.
- Case files and documents: up to 5 years after the case ends, unless the law requires longer.
Your rights
- You can ask to see your data, correct it, withdraw your consent to follow-up, or ask us to delete it. Where a case was completed, some records must be kept; we then limit their use.
- Signed-in users can see their data and send us a message in the portal. Everyone else can use the contact form on our website.
How we protect it
- Your data is stored on our own server. Documents are kept outside the public website and can only be downloaded after signing in. Every view of an identity or bank document is logged.
- Nothing on this site is legal advice. We are not a law firm.