Privacy Policy
This privacy policy explains how Highland Villas 3 (“we”, “our”) handles personal information collected through this website. We try to keep things simple, lawful, and respectful of your privacy.
Who we are
Highland Villas 3 is part of Highland Property Solutions, a property developer based in the Black Mountain area of Hua Hin, Thailand. If you have any questions about this policy or your personal data, please email us at [email protected].
What data we collect
- Information you give us via the contact form: your name, email address, phone number, and the content of your message. Submitting the form is voluntary.
- Basic server logs: our hosting provider records standard request data such as IP address, user agent, and timestamps for security and reliability. These logs are kept for a short period and are not used to profile visitors.
- No analytics or marketing cookies (currently): we do not run Google Analytics, Facebook Pixel, or similar trackers on this site. See our cookie notice for details.
Why we collect it
We use the information you provide to respond to your enquiry, share availability and pricing, schedule a viewing, and follow up on conversations you have started with us. If you become a customer, we also use it to manage that relationship through to and beyond completion.
Lawful basis
For visitors in Thailand, we rely on the Personal Data Protection Act (PDPA) — primarily your consent when you submit the contact form, and our legitimate interest in running our property business. For visitors in the European Union and United Kingdom, we rely on the General Data Protection Regulation (GDPR), specifically Article 6(1)(a) consent and Article 6(1)(f) legitimate interest.
How long we keep it
We keep enquiry data for up to three years from your last contact with us, after which it is deleted or anonymised. If you ask us to delete your data sooner, we will do so unless we are required to keep it for a specific legal or contractual reason.
Who we share it with
We do not sell, rent, or trade your personal information. We do share limited data with the following service providers strictly to operate the website:
- Tally — processes contact form submissions on our behalf.
- Railway — hosts the website and stores server logs.
- Cloudflare — delivers images and provides DDoS protection.
Each of these providers has its own privacy and security commitments. We may also disclose information if required to do so by Thai law or a binding court order.
Your rights
Subject to applicable law, you have the right to access the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, object to certain uses, and withdraw consent at any time. To exercise any of these rights, email us at [email protected]. We will respond within a reasonable period.
International transfers
Because our hosting and email infrastructure operate globally, your data may be stored or processed on servers outside Thailand, including in the European Union and the United States. Where required, we rely on the standard safeguards offered by our processors (such as standard contractual clauses) for these transfers.
Children’s data
This website is not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has submitted information to us, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time — for example if we change our service providers or add new features. The “last updated” date below will always reflect the current version.
Contact
Questions, requests, or concerns? Email [email protected], or call us using the phone number listed on our contact page.
Last updated: 2026-05-09