Privacy Policy

Last updated: February 2026

This Privacy Policy is prepared in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and explains how BuyCar24 collects, uses, discloses, and protects your personal data.

1. Data Controller

BuyCar24, located in Phuket, Thailand, is the data controller of your personal data. You may contact us at info@buycar24.com.

2. Information We Collect

We collect the following information when you use BuyCar24:

  • Personal information: full name, email address, phone number, LINE ID
  • Account information: login email, password (encrypted)
  • Listing data: vehicle details, photographs, pricing, province location
  • Dealer information: business name, address, logo, storefront images, license number
  • Usage data: pages visited, search queries, session duration
  • Device information: browser type, operating system, IP address

3. Legal Basis for Processing

We process your data on the following legal bases:

  • Contractual necessity: To provide the platform, create accounts, and manage car listings
  • Consent: For marketing communications and promotional content
  • Legitimate interest: To improve services, prevent fraud, and analyze usage
  • Legal obligation: When required by law to retain data

4. How We Use Your Information

We use your information to:

  • Provide the platform and manage user accounts
  • Display car listings and connect buyers with sellers
  • Process payments (e.g., Premium Boost service)
  • Send notifications about your account and listings
  • Improve and develop our services
  • Prevent misuse and fraud

5. Information Sharing

We do not sell your personal data. We may disclose information only in the following cases:

  • Buyers/Sellers: Contact information you choose to display in your listing (phone, LINE ID)
  • Service providers: Hosting, email, and analytics services with data protection agreements
  • Government authorities: When required by law or court order

6. International Data Transfers

Your data may be stored on servers located outside Thailand through our cloud service providers. We ensure these providers maintain adequate data protection measures as required by the PDPA.

7. Data Retention

We retain your data for the following periods:

  • Account data: While your account is active, plus 1 year after closure
  • Listing data: While the listing is active, plus 6 months after removal
  • Payment records: 5 years as required by tax law
  • Usage data: 1 year

8. Data Security

We implement appropriate security measures to protect your data, including SSL/TLS encryption, hashed passwords, Role-Based Access Control, and Row Level Security policies in our database. However, no system is 100% secure. We will notify you promptly in the event of a data breach.

9. Cookies and Tracking

Our website uses the following cookies:

  • Essential cookies: For login and basic website functionality
  • Analytics cookies: To understand how users interact with our website

You can configure your browser to reject cookies, but this may affect login functionality and some features.

10. Your Rights Under PDPA

Under the PDPA, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data
  • Right to restriction: Request temporary suspension of data processing
  • Right to data portability: Receive your data in a machine-readable format
  • Right to object: Object to the collection or use of your data
  • Right to withdraw consent: Withdraw consent at any time

To exercise any of these rights, please contact info@buycar24.com. We will respond within 30 days.

11. Children's Data

Our service is intended for individuals aged 18 and above. We do not knowingly collect data from minors. If we learn that we have collected data from a minor without parental consent, we will delete it immediately.

12. Policy Changes

We may update this policy from time to time. Significant changes will be communicated via email or website notification. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Complaints

If you believe we have handled your data improperly, you may contact us at info@buycar24.com or file a complaint with Thailand's Personal Data Protection Committee (PDPC).