Privacy Policy

We collect only what we need to run a safe shop-takeover marketplace. Sellers' contact details are shown only to buyers who have verified their phone number, and verification documents are deleted automatically 90 days after a listing closes. This policy follows Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If the Thai and English versions differ, the Thai version applies.

Data controller: SengSure (เซ้งชัวร์), operator of sengsure.com · Email contact@sengsure.com

1. What we collect and how long we keep it

We do not store credit card details, and we do not sell personal data.

2. Verification documents

Sellers upload documents when they post a listing, so our team can review it within 1 working day. Listings that pass get a "Verified" badge. We ask only for:

1. ID card. Please cover your religion, blood type and the number on the back (if any) before uploading. We don't need them.
2. Lease. Only the pages showing the tenant's name, the premises and the end date.
3. Landlord consent letter (if you have one) and company certificate (if the lease is in a company's name).
4. Landlord's phone number, used to confirm they agree to the transfer. Only our team sees it.

Documents are kept in private storage. Only the seller who uploaded them and our review team can open them, through links that expire after 10 minutes. They are never shown to buyers or the public, and are deleted automatically 90 days after the listing closes (sold, removed or expired). If the seller renews the listing, the documents are kept until it closes again.

3. Who sees your data

• Anyone sees listings, photos, the approximate location, the shop name (unless the seller hides it), the seller's display name, badges and a partly hidden phone number.
• Signed-in buyers with a verified phone see the seller's phone number and LINE ID, for up to 10 shops a day. They see the full shop address only if the seller chose to show it.
• Sellers see how many people viewed their listing and their contact details, but not who, unless a buyer gets in touch.
• The SengSure team reviews documents and listings and handles reports.
• Authorities when the law requires it, or under a valid warrant or order.

Service providers that process data for us

Transfers outside Thailand. Our main data is stored in Singapore, and emails are sent through servers in Japan. We use only providers with data-protection standards adequate under the PDPA.

4. Cookies and security

Cookies. We use the cookies and browser storage needed for sign-in and to remember your language. We use Google Analytics cookies to see how pages are used only if you choose “Accept” in the cookie notice. If you decline, Google receives only anonymous signals and no cookies are set. You can change your choice any time in cookie settings. We do not use advertising cookies.

Security

• HTTPS encryption on every page.
• Row-level access rules: users can see and change only their own data.
• Sellers' phone numbers are not in the page code, and contact views are limited per day.
• The full shop address is stored separately and never sent to visitors' browsers unless the seller chooses to show it. Verification documents open only through links that expire after 10 minutes.
• If a breach puts people at risk, we will notify the Personal Data Protection Committee (PDPC) within 72 hours and inform those affected as the law requires.

5. Your rights

Under the PDPA you have the following rights. We reply to requests within 30 days.

• See and get a copy of your data.
• Correct inaccurate data.
• Have your data deleted or anonymised.
• Restrict or object to how we use your data.
• Receive your data in a machine-readable format, or have it sent to someone else.
• Withdraw consent at any time, without affecting earlier processing.
• Complain to the PDPC if you think we have broken the law.

Some requests can't be met in full, for example contact logs we must keep to investigate fraud. We will tell you why.

Privacy contact: contact@sengsure.com · We will post any change to this policy on the website before it takes effect.