Privacy Policy
Last updated: 18 September 2026
This Policy explains what personal data Legat ABC may process, why it is used, to whom it may be disclosed, how long it may be retained and what rights users may have.
The Policy applies to https://legat-abc.com, user accounts, the catalogue, offer cards, contact forms, enquiries, requests, search and save functions, reviews, moderation, partner interactions and other digital functions of Legat ABC.
1. Data controller
The operator of Legat ABC and the entity determining the main purposes and means of processing personal data within the platform is:
PCS Premium Concierge Co., Ltd.
Juristic Person Registration No.: 0205569036774
Registration date: 10 July 2026
Registered capital: THB 4,000,000
Registered office: Room no. 565/95, Moo 10, Nong Prue Subdistrict, Bang Lamung District, Chonburi Province, Thailand
E-mail: premium.concierge.service28@gmail.com
Phone / WhatsApp / LINE: +66 83 612 2210
Website: https://legat-abc.com
The company is registered in the Kingdom of Thailand.
Privacy questions, data-subject requests and deletion requests may be sent to the e-mail address above.
2. Applicable law
Because the operator is registered in Thailand, personal data is processed with regard to the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019) - PDPA, to the extent applicable.
Where mandatory rules of another jurisdiction apply to a particular user or processing activity, including rules of the European Union, European Economic Area or another country, Legat ABC applies such mandatory requirements to the relevant extent.
Nothing in this Policy limits rights that cannot lawfully be waived or restricted by agreement.
3. Who this Policy applies to
This Policy may apply to:
- website visitors;
- registered users;
- persons sending enquiries or requests;
- clients of PCS Premium Concierge Co., Ltd. own services;
- users interacting with partners through Legat ABC;
- owners, agents, companies, employers, professionals and other participants submitting offers for publication;
- company and partner representatives;
- persons submitting reviews, complaints or support requests;
- candidates and users of jobs and CV sections, where such functionality is available;
- other persons whose data is lawfully provided to the operator in connection with platform operations.
4. Personal data we may process
Depending on the function used, Legat ABC may process the following categories.
4.1. Identification data
- first and last name;
- display name;
- date of birth or age where required for a specific service;
- nationality or other identification information where necessary for lawful verification or service delivery.
4.2. Contact data
- telephone number;
- e-mail address;
- messenger identifiers and contact details;
- preferred communication language;
- other contact details voluntarily provided by the user.
4.3. Account data
- login and account identifier;
- profile settings;
- saved offers and favourites;
- account activity history;
- notification and communication settings.
Passwords should be stored in a protected form appropriate to the technical system in use. Legat ABC does not ask users to disclose passwords to employees, partners or providers.
4.4. Enquiry and request data
- selected category;
- offer of interest;
- content of the request;
- travel, rental, booking or service dates;
- user preferences and requirements;
- budget, number of participants and other parameters supplied for selection;
- communication history;
- processing status;
- source of the enquiry and responsible party.
4.5. Listing and publication data
For owners, partners, agents, companies, employers and professionals, the following may be processed:
- company or project details;
- representative name and position;
- contact details;
- information about the product, property, service, vacancy or project;
- documents and evidence supporting the right to publish;
- information about licences, authority, permits and registration;
- card materials, photographs and other submitted content;
- approval and moderation history.
4.6. Verification documents
For certain categories or services, Legat ABC may request documents needed to verify identity, a company, authority or the right to publish.
Such documents may contain personal data. Their processing is limited to verification, request fulfilment, contractual relations or legal obligations.
Users should not provide more data than is necessary for the specific purpose.
4.7. Payment and commercial-interaction data
For PCS Premium Concierge Co., Ltd. own services, information necessary for invoicing, payment confirmation and accounting may be processed.
For partner offers, the basic model provides for direct payment by the user to the provider. In such cases, Legat ABC may retain information about the referral, booking/service status and completion of a paid service to the extent necessary for referral attribution and B2B remuneration accounting.
Legat ABC does not receive payment merely for transferring a user's personal data. Partner remuneration relates to the agreed commercial relationship, the referral and/or a service actually provided.
4.8. Technical data
When the website is used, the following may be processed automatically
- IP address;
- device type;
- operating system;
- browser;
- interface language;
- date and time of visit;
- pages viewed;
- referral source;
- session identifiers;
- security and error logs;
- approximate location derived from technical data where such functionality is used.
4.9. Cookies and analytics data
Legat ABC may use cookies and similar technologies for website operation, authentication, security, preference storage, analytics and interface improvement.
Non-essential cookies are used in accordance with applicable law and, where required, after user consent.
Further details may be set out in a separate Cookie Policy.
4.10. Reviews, complaints and reputation data
Where a user submits a review, reports a problem or participates in a dispute, we may process:
- the content of the review or complaint;
- details of the relevant enquiry or interaction;
- evidence and documents voluntarily supplied by the parties;
- dispute-related communications;
- outcome and measures taken.
5. Sensitive data
Legat ABC does not seek to collect special or sensitive categories of personal data unless necessary.
Users should not submit health data, biometric data, information about religion, political views, criminal history or other sensitive data unless it is required for a specific lawful purpose.
Where such processing is genuinely necessary, it is carried out only on an appropriate legal basis and with additional safeguards required by applicable law.
6. Sources of personal data
Personal data may be obtained:
- directly from the user through the website, forms, account, e-mail, telephone, messengers and other channels;
- from a company, partner, employer, owner or representative with whom the user interacts;
- from a person lawfully acting on behalf of the user;
- automatically when the website is used;
- from public government registers, official sources or public professional sources where needed to verify a company, authority or offer;
- from documents and materials supplied by platform participants.
Where data is not obtained directly from the user, Legat ABC processes it only where there is a lawful basis and only to the extent necessary for the relevant purpose.
7. Purposes of processing
Personal data may be processed to:
- provide and maintain the website;
- create and maintain accounts;
- search, filter and save offers;
- process enquiries and requests;
- forward a request to the responsible provider, partner or company;
- arrange PCS Premium Concierge Co., Ltd. own services;
- verify participants and offers;
- publish and moderate cards;
- confirm publishing rights;
- communicate with users;
- handle complaints and disputes;
- prevent fraud, abuse and security threats;
- maintain request history and quality control;
- attribute partner referrals and record client routing;
- perform contractual and accounting obligations;
- comply with legal requirements;
- protect the rights and legitimate interests of the operator, users and partners;
- analyse platform performance;
- improve search, interface and catalogue structure;
- localize and translate information;
- send service notifications;
- send marketing communications only where there is an appropriate legal basis and an opt-out mechanism.
8. Legal bases
Depending on the circumstances, processing may be based on:
- necessity for entering into or performing a contract;
- steps taken at the user's request before entering into a contract;
- the user's consent;
- a legal obligation of the operator;
- legitimate interests of the operator or a third party where those interests do not override the user's rights;
- other grounds expressly permitted by applicable law.
Legitimate interests may include security, fraud prevention, rights protection, maintaining request history, improving the platform, quality assurance, verifying partner attribution and handling complaints.
Where processing relies on consent, the user may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
9. Sharing data with partners and providers
A core Legat ABC scenario is routing a user's request to the responsible provider.
Depending on the offer, data may be shared with:
- a relevant Legat Business company;
- a property owner;
- a seller;
- a landlord;
- an employer;
- a service provider;
- a verified partner;
- another participant responsible for the specific offer.
Legat ABC follows a data-minimisation principle: only data needed to process the particular request should be shared with the partner.
After a request is transferred, the partner or provider may independently determine the purposes and means of further processing and may act as a separate data controller under its own applicable law and privacy policy.
Users are encouraged to review the relevant provider's privacy policy before providing additional data or entering into a contract.
10. Other recipients
Where necessary, data may also be accessible to:
- hosting and cloud-infrastructure providers;
- technical contractors;
- e-mail, communications and support services;
- analytics and security providers;
- translation, localization and automation services;
- professional advisers, accountants and lawyers;
- payment organizations where a user pays for the operator's own service;
- public authorities, courts and regulators where disclosure is required by law;
- a business successor in the event of reorganization, sale or transfer of the relevant part of the project, subject to legal requirements.
Recipients receive access only to the extent necessary for their function and must comply with applicable confidentiality and data-protection requirements.
11. International and cross-border transfers
Legat ABC is an international platform and the operator is registered in Thailand. Users, partners, providers and technical services may be located in different countries.
Personal data may therefore be processed or transferred between Thailand and other countries where necessary for:
- handling a user's request;
- working with an international partner;
- technical infrastructure;
- support, analytics or security;
- performing a contract or legal obligation.
For cross-border transfers, Legat ABC applies safeguards required by the relevant law. Where the law requires specific contractual, organizational or other safeguards, those safeguards must be implemented before transfer.
12. Public listings, profiles and search engines
Information intentionally submitted by a participant for public publication in the catalogue may be available to an unrestricted audience and indexed by search engines.
This may include:
- company name;
- the name of a professional representative where intended for publication;
- business contact details;
- service or offer descriptions;
- photographs and other card materials;
- reviews where review functionality is public.
Passport data, private home addresses, bank details and other information not intended for public access should not be placed in a public card.
After public information is deleted, copies may remain temporarily in search-engine caches or third-party services outside Legat ABC's control.
13. Artificial intelligence and automated tools
Legat ABC may use automated and AI-assisted tools for supporting functions such as:
- search and ranking;
- listing categorization;
- translation and localization;
- moderation;
- spam and suspicious-activity detection;
- drafting support responses;
- catalogue quality analysis.
Such tools should not be used as the sole basis for decisions producing legal or similarly significant effects for a user unless such processing is separately disclosed and permitted by applicable law.
Where a function requires data to be sent to an external technology provider, the amount of data should be limited to what is necessary and processing should have an appropriate legal basis and safeguards.
14. Marketing communications
Legat ABC may send news, offers or marketing communications where:
- the user has provided the relevant consent; or
- such communication is otherwise permitted by applicable law.
Users may opt out through the provided mechanism or by contacting the operator by e-mail.
Marketing opt-out does not prevent service messages required for an account, request, security or contract.
15. Retention
Legat ABC retains personal data no longer than necessary for the stated purposes, unless a longer period is required by law or for the protection of legal rights.
Retention criteria may include:
- duration of the account and relationship;
- nature of the request or service;
- need to verify partner attribution;
- accounting and tax requirements;
- applicable limitation periods and possible disputes;
- security and fraud-prevention needs;
- applicable legal obligations.
Documents obtained solely for verification should not be retained longer than necessary for that verification and related lawful purposes.
When the retention period ends, data is deleted, destroyed, anonymized or isolated from ordinary use according to technical and legal requirements.
16. Data security
Legat ABC applies reasonable technical and organizational measures appropriate to the nature of the data and processing risks.
Measures may include:
- role-based and need-to-know access restrictions;
- access controls for accounts and internal systems;
- separation of public and internal data;
- protected document storage;
- backup and recovery;
- security logging;
- limiting the data shared with partners;
- internal confidentiality procedures;
- controls when using third-party contractors.
No storage or transmission method can guarantee absolute security. If an incident is identified, the operator takes steps to contain and investigate it and to notify competent authorities and/or affected persons where and within the time required by law.
17. User rights
Depending on applicable law, users may have the right to:
- receive information about processing;
- request access to and a copy of their data;
- correct inaccurate or incomplete data;
- request deletion, destruction or anonymization;
- restrict processing;
- object to certain processing;
- receive data in a portable format where applicable;
- withdraw consent;
- opt out of marketing communications;
- lodge a complaint with a competent supervisory authority;
- request review of a decision based solely on automated processing where such a right applies.
Requests may be sent to premium.concierge.service28@gmail.com.
To protect data, the operator may request information sufficient to verify the requester's identity and authority.
Requests are handled within the time limits required by applicable law.
18. When deletion may be limited
A deletion request does not always require immediate destruction of all information.
The operator may retain certain data where necessary for:
- compliance with law;
- accounting or tax records;
- contract performance;
- establishment, exercise or defence of legal claims;
- fraud prevention;
- security;
- dispute resolution;
- other lawful grounds.
In such cases, processing is limited to the relevant purpose.
19. Children's data
Legat ABC is not specifically designed for independent use by young children.
Where a specific service or category involves personal data of a minor, processing must take account of the user's age and applicable legal requirements, including parental or legal-representative consent where required.
Users should not submit a child's data without appropriate authority.
20. Third-party websites and services
Legat ABC may contain links to third-party websites and services.
Their privacy practices are determined by the relevant third parties. Legat ABC does not control a third party's data processing merely because a link to that service appears on the platform.
21. Complaints and supervisory authority
For questions about data processing, users may first contact the operator:
E-mail: premium.concierge.service28@gmail.com
Phone / WhatsApp / LINE: +66 83 612 2210
Users who believe their rights have been infringed may also contact the competent data-protection authority.
For processing subject to Thai law, the relevant authority is the Office of the Personal Data Protection Committee (PDPC), Thailand.
The availability of Legat ABC's internal contact channel does not limit a user's right to contact a competent authority directly where that right exists.
22. Changes to this Policy
Legat ABC may update this Policy when there are changes to:
- platform functionality;
- categories of data;
- processing methods;
- service-provider arrangements;
- international project structure;
- applicable law;
- security requirements.
The current version is published on the website with the date of the latest update.
Where a change materially affects user rights and the law requires additional notice or consent, such notice or consent will be provided separately.
23. Language versions
This Policy may be published in several languages.
In the event of discrepancies between translations, the English version prevails for interpretation unless mandatory law applicable to a specific user requires otherwise.
24. Contact details
PCS Premium Concierge Co., Ltd.
Juristic Person Registration No.: 0205569036774
Registered office: Room no. 565/95, Moo 10, Nong Prue Subdistrict, Bang Lamung District, Chonburi Province, Thailand
E-mail: premium.concierge.service28@gmail.com
Phone / WhatsApp / LINE: +66 83 612 2210
Platform: https://legat-abc.com