Privacy Policy

Last updated: 26/11/2025

1. Introduction

LitA Rentals ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our direct booking platform that connects property hosts and guests in Thailand.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account
  • Identity Verification: Government-issued ID for verification purposes as required for booking and hosting
  • Profile Information: Profile photos, biography, contact preferences (WhatsApp, LINE IDs)
  • Property Information: Property details, photos, descriptions, pricing, and availability (for hosts)
  • Booking Information: Reservation details, guest counts, special requests, and communication with hosts/guests
  • Payment Records: Payment confirmation details (handled directly between parties - we do not process payments)

2.2 Information Automatically Collected

  • Technical Information: IP address, browser type, device information, and operating system
  • Usage Data: Pages visited, search queries, time spent on pages, and interaction patterns
  • Session Data: Login times, session duration, and platform usage patterns

3. How We Use Your Information

  • Platform Operation: Facilitate direct bookings between hosts and guests
  • Identity Verification: Verify user identity for safety and trust
  • Communication: Enable direct communication between hosts and guests via our platform
  • Support Services: Provide customer support and dispute resolution assistance
  • Safety & Security: Monitor for fraudulent activity and maintain platform security
  • Legal Compliance: Comply with applicable laws and regulations in Thailand
  • Platform Improvement: Analyse usage patterns to improve our services

4. Information Sharing

4.1 Direct Booking Model

Our platform facilitates direct bookings between hosts and guests. Upon booking confirmation, we share:

  • Guest contact information with the host
  • Host contact information (WhatsApp, LINE, phone) with the guest
  • Booking details necessary for the reservation

4.2 Service Providers

We may share information with:

  • Identity Verification Services: For user verification purposes
  • Email Services: For sending notifications and communications
  • Analytics Providers: For platform improvement (anonymised data only)
  • Security Services: For fraud prevention and platform security

4.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

5. Data Security

We implement appropriate security measures including:

  • Encryption: Data transmission using HTTPS/TLS encryption
  • Authentication: Secure session management with NextAuth.js
  • Database Security: Parameterised queries to prevent SQL injection
  • Access Controls: Role-based access with ownership verification
  • Input Validation: Comprehensive validation using Zod schemas

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data (subject to legal requirements)
  • Portability: Request a machine-readable copy of your data
  • Objection: Object to processing for marketing purposes
  • Restriction: Request limitation of data processing in certain circumstances

7. Data Retention

We retain your information:

  • Active Accounts: As long as your account remains active
  • Booking Records: For 7 years after the booking completion for tax and legal purposes
  • Identity Verification: For regulatory compliance as required by Thai law
  • Legal Requirements: As long as required by applicable laws

8. International Transfers

Your data is primarily stored and processed in Thailand. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

9. Children's Privacy

Our platform is not intended for users under 18 years old. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this policy or our practices, please contact us: