1. General
This privacy policy provides information on how FRED & CO LTD. (“we”, “us”) collects and processes personal data as the controller.
“Personal data” refers to all information relating to an identified or identifiable natural person. “Processing” means any handling of personal data, in particular collecting, storing, retaining, using, altering, disclosing, archiving, deleting, or destroying it.
If you provide us with personal data of other individuals (e.g. employees of your organisation), please ensure that these individuals are aware of this privacy policy and that you are authorised to provide it.
2. Controller and Contact
FRED & CO LTD. is responsible for processing your personal data within the scope of our business activities. For any data protection-related concerns, you can contact our office:
FRED & CO LTD.
252/47 Moo 1
Maenam, Koh Samui, 84330
Suratthani – Thailand
3. Collection and Processing of Personal Data
We primarily process data that you provide to us when you make inquiries, register for our real estate services, subscribe to updates, or use our website. In addition, we process data that arises when utilising our real estate brokerage and management services, as well as data from publicly accessible sources (e.g. land registries, public directories, or official real estate portals).
4. Categories of Personal Data
We process the following categories of personal data in particular: Master data: Name, address, contact information, customer identification numbers, property preferences, or contract details. Communication data: Email addresses, telephone numbers, correspondence. Administrative data: Information regarding property viewings, transactions, client agreements, and payment records. Visitor data: Technical data when visiting the website (IP addresses).
5. Purposes of Processing
We process data to fulfil our business and contractual purposes, in particular:
- Client management, real estate brokerage, and related correspondence.
- Organisation of property viewings, client meetings, and contract negotiations.
- Providing information regarding real estate listings, market developments, and company services.
- Fulfilment of legal and regulatory obligations (e.g. accounting, local business requirements in Thailand).
- Ensuring IT security and website operation.
6. Data Security
We implement appropriate technical and organisational security measures to protect the confidentiality, integrity, and availability of your personal data (e.g. access restrictions, IT security standards).
7. Disclosure to Third Parties and Cross-Border Data Transfer
We only pass on your data if this is necessary for our business operations (e.g. service providers for IT, cloud storage, or communication tools) or if there is a legal obligation. In the event of data transfers abroad, we ensure that an appropriate level of data protection is guaranteed.
8. Use of Websites and Cookie Policy
When an individual visits FRED & CO LTD.’s websites, the web server automatically registers details about their visit (e.g. the website from which the visit originates, the IP address, date, and duration of the visit). This data is used to optimise our website. We also use cookies on our website.
a) Gravity Forms (Contact Forms)
When you fill out forms on our website (provided by the Gravity Forms plugin), the data you enter is stored by us to process the enquiry and in the event of follow-up questions. This data remains on our web server or in our database until the purpose for data storage ceases to apply (e.g. after processing your enquiry has been completed). Mandatory statutory retention periods remain unaffected.
b) Mailchimp (Newsletter Dispatch)
We use the Mailchimp service (Intuit Inc., USA) to send our newsletter and manage subscribers. When you register for our newsletter, your email address and, where applicable, further information are transmitted to Mailchimp. Mailchimp uses this data to send and statistically evaluate the newsletters. Data transmission to the USA is secured by appropriate data protection agreements (standard contractual clauses). You can unsubscribe from the newsletter at any time by using the link at the end of each email.
c) Google Fonts
To ensure an aesthetically appealing design of our website, we use Google Fonts (Google LLC, USA / Google Ireland Limited, Ireland). When you access a page, your browser loads the required fonts directly from Google servers. In doing so, Google becomes aware that our website has been accessed from your IP address. According to Google, no cookies are set in the process; the IP address is used exclusively to provide the fonts.
d) Google Services (Analytics, Tag Manager, reCAPTCHA, Search Console)
We use various services provided by Google LLC (USA) or Google Ireland Limited (Ireland) on our website. Data transmission to the USA is based on Google’s certification under the Swiss-U.S. Data Privacy Framework.
- Google Analytics: Used to analyse user behaviour. We use this service with IP anonymisation enabled.
- Google Tag Manager: Manages website tags; does not collect personal data itself and does not set cookies.
- Google reCAPTCHA: Protects our forms from spam/bots. Analyses behaviour (IP address, mouse movements).
- Google Search Console: Monitors technical performance in Google search; no collection of personal data from regular visitors.
e) API Services with Qobrix
We integrate API services provided by Qobrix on our website to ensure efficient data synchronisation, property management functionalities, or streamlined data exchange. When these services are invoked or utilized, technical data (such as IP addresses and request timestamps) or relevant form and user data may be processed via Qobrix’s infrastructure. Data processing is carried out to ensure the seamless technical integration and functionality of our digital platforms. Appropriate contractual and technical safeguards are maintained to protect your personal data during these integrations.
9. Retention Period
Data is retained for as long as required for the purpose of processing or as mandated by statutory retention obligations (typically 10 years for business-relevant documents).
10. Rights of Data Subjects
You have the right at any time to request access, rectification, erasure, restriction of processing, as well as the portability of your stored personal data. To exercise these rights, please contact our office mentioned above.
11. Amendments
We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply.
Koh Samui, Thailand, 24th July 2026