Privacy Policy

1. Who is responsible for your data

The data controller is MMK BRON Co., Ltd., a company registered in Thailand under registration no. 0845566004116, the developer of The Boon Condominium, Koh Samui.

Contact for any privacy question: [email protected], tel. +66 62 156 4059.

2. What data we collect

• Contact form: your name, phone number and/or email, your message, the apartment you selected (if any), the language of the site and the page you sent the form from, advertising tags (UTM) from the link you arrived with, and the date and version of your consent.
• Messages you send by email, WhatsApp, Telegram or phone: the content of the conversation and your number or username.
• Technical data: your IP address and browser data are processed by our hosting and security providers when you open the site and when the form runs its security check (Cloudflare Turnstile).
• Site statistics, only if you allow analytics in the cookie banner: pages viewed, clicks on the call, WhatsApp and Telegram buttons, sent requests, approximate location, device and browser type (Google Analytics).

3. Why we use it and on what basis

We use your data to answer your request, to send you information about apartments, availability, floor plans, prices and payment terms, to follow up on your interest in the project, to keep a record of our communication, and to protect the site and the form from spam and abuse.

• Your consent, which you give by ticking the box in the form. You can withdraw it at any time.
• Our legitimate interest in keeping the site secure and in handling your request efficiently.
• Legal obligations, where we must keep records.

We do not sell your personal data and we do not use it for automated decision-making.

4. Who receives your data

Only the people and services that are needed to handle your request:

• Our team and sales representatives working with us, who are bound by confidentiality.
• Service providers acting on our instructions: Cloudflare (website hosting and the form security check), Supabase (the database of our CRM), Resend (email delivery), Telegram (an internal notification to our team chat), and Google Analytics (statistics of site use, only if you allow analytics in the cookie banner).
• Professional advisers or authorities, only where the law requires it.

If you contact us through WhatsApp or Telegram, those services process your data under their own policies. Links to Google Maps open Google’s service.

5. Transfers abroad

Some providers store or process data outside Thailand. We choose providers that apply appropriate safeguards, and we share only the data that is needed.

6. How long we keep it

We keep your data for as long as it is needed for the purposes above. As a rule, we delete or anonymise it no later than 3 years after our last contact with you, unless a longer period is required by law or by a contract with you.

7. Your rights

You may ask us to:

• tell you what data we hold about you and give you a copy;
• correct inaccurate data or complete it;
• delete your data or restrict its use;
• stop using your data (object) or withdraw your consent at any time, without affecting what was done before;
• transfer your data to you or to another controller in a common format.

Write to [email protected] and we will reply within 30 days. You also have the right to complain to the Personal Data Protection Committee of Thailand or to the data protection authority in your country.

8. Cookies and similar technologies

The site uses only the technologies that are necessary for it to work and to stay secure, including the security check of the contact form. If you allow analytics in the cookie banner, we use Google Analytics 4 to see how the site is used. It is set up without advertising personalisation and without Google signals. We do not use advertising technologies. You can change your choice at any time with “Cookie settings” at the bottom of every page.

9. Security and children

The site works over an encrypted connection, access to the data is limited to authorised people, and our providers are bound by confidentiality. The site is intended for adults and we do not knowingly collect data from children.

10. Changes to this policy

We may update this policy. The current version is always on this page with the date of the last update above.