Short version: we collect what we need to run the service, we never sell your data, we delete what we don't need after the lease ends. The full legal text is below.
1. What we collect
- Account info: name, email, phone, country of residence
- Identity verification: passport / ID scan, address proof — held encrypted, never shared with third parties without your consent
- Financial info: bank reference or employer letter (for landlord verification only), card / bank details (for payment processing — handled by Stripe / Wise, not stored by us)
- Usage data: what listings you view, what you search for, what you save — used to improve search relevance and recommendations
- Communications: messages with agents and landlords stored 18 months post-lease for dispute resolution
2. What we don't collect
- Browsing history beyond bestrent.asia
- Social media accounts (unless you opt to link them)
- Location data beyond what you tell us
- Biometric data beyond optional ID verification
3. How we use it
For: matching you with relevant properties, running background checks for landlord verification, processing payments via escrow, sending transactional emails (booking confirmations, viewing reminders), responding when you contact us.
Not for: selling to third parties (ever), advertising beyond our own listings, profiling for non-rental purposes.
4. Who we share with
- Your assigned agent — full profile + verified ID, to assist with your search
- Landlords you actively engage with — name, basic background reference, after you confirm interest in their property
- Wise Payments + Stripe — for escrow + payment processing, on the financial info only
- Sendgrid — for transactional email delivery only
- Government authorities — only when legally required (e.g., Thai TM30 address registration)
5. How long we keep it
Active accounts: kept while account is active.
Inactive accounts: notified after 18 months of no activity; full deletion 24 months after last activity unless you opt to keep.
Post-lease records: lease docs and dispute-relevant communications kept 5 years (legal requirement). Other data deleted within 90 days of lease end.
6. Your rights
You have the right to: access your data (request via dashboard), correct anything wrong, export it (JSON download, available in settings), delete it (with the legal-retention caveat above), object to processing, restrict use, withdraw consent.
To exercise any of these, email privacy@bestrent.asia. We respond within 30 days (GDPR-required).
7. Cookies
Essential cookies only (session, CSRF token, language preference). No advertising cookies. No third-party tracking. No fingerprinting. You don't need to "accept cookies" because we don't use any that need consent.
8. Where data is stored
Account data: AWS Singapore (ap-southeast-1) with daily encrypted backups to Frankfurt (eu-central-1). Photo uploads: Cloudflare R2 (global edge, GDPR-compliant). Payment data: handled entirely by Stripe and Wise on their own infrastructure — we never see card numbers.
9. Children's data
BestRent is not directed at users under 18 and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email privacy@bestrent.asia and we'll delete the account within 7 days.
10. Updates to this policy
Material changes are emailed to all users 30 days in advance. Minor wording fixes (typos, clarifications) updated silently. Past versions archived on request.
Privacy contact: privacy@bestrent.asia · EU representative: available on request for GDPR Art. 27 inquiries.