Mather ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our platform at mather.to — a rental property marketplace connecting expats and foreigners in Thailand with local landlords.
This policy is written in compliance with the Personal Data Protection Act B.E. 2562 (PDPA), Thailand's data protection law.
1. Data Controller
Mather is the data controller responsible for your personal data. You can contact us at hello@mather.to with any data-related requests or questions.
2. Information We Collect
We collect personal information in the following ways:
a) Information You Provide
When you submit a property inquiry or contact form on our platform, we collect:
- Full name — to identify you in communications with landlords
- Email address — for follow-up and notifications
- Phone number — for direct contact by the landlord
- LINE or WhatsApp contact — if provided, as an alternative contact channel
- Preferred viewing date — to schedule property viewings
- Message / notes — any additional information you choose to share
b) Information Collected Automatically
When you visit our site, we automatically collect:
- IP address and approximate location (country/city level)
- Browser type, operating system, and device information
- Pages visited, time on site, and interaction data
- Search queries entered on our property search
- Referral source (how you found our site)
This data is collected via cookies and analytics tools. See our Cookie Policy for details.
c) Account Information (if applicable)
If you register an account (e.g. as a landlord), we also collect your email address, hashed password, and account role. We do not store plaintext passwords.
3. How We Use Your Information
We use your personal data for the following purposes:
- Connecting you with landlords — your inquiry details are forwarded to the relevant landlord so they can arrange viewings and answer questions
- Platform operation — managing your account, authenticating sessions, and providing core functionality
- Communications — sending confirmation emails for submitted inquiries and responding to support requests
- Improving our platform — analysing usage patterns, search behaviour, and property views to enhance the user experience
- Legal compliance — fulfilling obligations under applicable Thai laws
4. Legal Basis
Under the PDPA, we process your data based on the following lawful grounds:
- Contractual necessity — processing your inquiry to fulfil your request to connect with a landlord
- Legitimate interests — analysing platform performance and preventing fraud
- Consent — for analytics cookies (where required)
- Legal obligation — where required by Thai law
5. Data Sharing
We do not sell your personal data. We share your information only in the following limited circumstances:
- Landlords — when you submit an inquiry for a specific property, your name and contact details are shared with that property's landlord solely to facilitate the viewing or rental process
- Service providers — we use third-party services that process data on our behalf under strict data processing agreements:
- Vercel — website hosting and serverless infrastructure
- Notion — content management system (property and blog data)
- Google Analytics — anonymised usage analytics
- Resend — transactional email delivery
- Cloudinary — property image hosting
- Turso (SQLite) — authentication and session storage
- Legal requirements — if required by a court order, government authority, or applicable law
6. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy:
- Inquiry data — retained for up to 2 years to support follow-up and dispute resolution
- Account data — retained for the duration of your account and up to 1 year after deletion on request
- Analytics data — retained for up to 26 months as set by Google Analytics
7. Cookies
We use cookies for session management, analytics, and functional preferences. For a full explanation of which cookies we use and how to control them, please see our Cookie Policy.
8. Your Rights Under PDPA
Under Thailand's Personal Data Protection Act (PDPA), you have the following rights with respect to your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements
- Right to restriction — request that we limit how we process your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of prior processing)
To exercise any of these rights, please contact us at hello@mather.to. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption, hashed password storage, and access controls limiting who can view your data internally. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.
10. International Transfers
Some of our service providers (such as Vercel, Google, and Cloudinary) are based outside Thailand. Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with PDPA requirements.
11. Children's Privacy
Our platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be announced on our website with a revised "last updated" date. We encourage you to review this policy whenever you use our platform.
13. Contact Us
For any privacy-related questions, requests, or complaints, please contact our data controller:
Mather
Bangkok, Thailand
Email: hello@mather.to