Information We Collect

Running a tax optimization consultancy means we need certain information to do our job properly. Here's what we typically collect and why it matters:

Client Information You Provide

• Contact Details: Your name, email address, phone number, and business address. We need this to communicate with you and send documents.
• Business Information: Company name, registration details, tax identification numbers, and business structure. This forms the foundation of your tax strategy.
• Financial Data: Income statements, expense records, investment details, and other financial information relevant to tax planning. We can't optimize what we can't see.
• Communication Records: Emails, meeting notes, and consultation records. These help us track your situation and maintain continuity.

Information Collected Automatically

When you visit our website, we collect basic technical information like IP addresses, browser type, and pages visited. This helps us keep the site running smoothly and spot any security issues. We use standard analytics tools for this—nothing invasive.

How We Use Your Information

We use your data for specific purposes related to providing tax optimization services. Here's the breakdown:

• Service Delivery: Analyzing your financial situation, developing tax strategies, preparing documentation, and providing ongoing consultation.
• Legal Compliance: Meeting our obligations under Thai tax law and regulatory requirements. Some record-keeping isn't optional.
• Communication: Sending you updates about your case, tax law changes that affect you, and responding to your questions.
• Internal Operations: Improving our services, training our team, and maintaining quality standards.
• Security: Protecting against fraud, unauthorized access, and other security threats.

Legal Basis for Processing Your Data

Under Thai data protection law, we need a valid reason to process your personal information. Here's what applies to our work:

• Contractual Necessity: Most of what we do is necessary to fulfill our service agreement with you. We can't provide tax optimization without processing your financial data.
• Legal Obligation: We're required to maintain certain records and comply with Thai Revenue Department regulations.
• Legitimate Interest: We have a legitimate business interest in improving our services and protecting against security threats, balanced against your privacy rights.
• Consent: For anything outside these categories, we'll ask for your explicit consent first.

How We Share Your Information

We keep your information confidential, but there are specific situations where we need to share it:

Service Providers

We work with trusted partners who help us operate—cloud storage providers, accounting software vendors, and secure communication platforms. These companies only access data necessary for their specific function and are contractually bound to protect it.

Legal Requirements

If Thai government agencies request information through proper legal channels—such as tax audits or court orders—we're obligated to comply. We'll notify you when legally permitted to do so.

Professional Advisors

Sometimes your tax situation requires input from lawyers, accountants, or other specialists. We only share relevant information with your knowledge and consent.

Data Security Measures

Financial information requires serious protection. Here's what we do to keep your data secure:

• Encryption: All data transmitted between you and our systems uses industry-standard encryption protocols (TLS 1.3). Stored data is encrypted at rest.
• Access Controls: Only team members working on your case can access your information. We use role-based permissions and multi-factor authentication.
• Secure Infrastructure: Our systems are hosted with reputable providers who maintain robust security standards and regular audits.
• Regular Backups: We maintain secure backups to prevent data loss, stored separately from production systems.
• Staff Training: Our team receives ongoing training on data protection and security best practices.
• Incident Response: We have procedures in place to detect, respond to, and notify you of any security incidents.

No system is completely foolproof, but we take every reasonable precaution to protect your information.

How Long We Keep Your Data

We don't keep information longer than necessary. Here are our retention periods:

After these periods, we securely delete or anonymize your information unless there's a specific legal reason to retain it longer.

Your Rights Under Thai Law

Thailand's Personal Data Protection Act gives you specific rights over your information. Here's what you can do and how to exercise these rights:

Access Your Data

You can request a copy of the personal information we hold about you. We'll provide this within 30 days, in a readable format. The first copy is free; we may charge a reasonable fee for additional copies.

Correct Inaccurate Information

If something we have on file is wrong or outdated, let us know and we'll fix it. This is important for tax work—accuracy matters.

Request Deletion

You can ask us to delete your information in certain circumstances. However, we may need to retain some data to comply with legal obligations or complete services you've requested.

Object to Processing

If you believe we're processing your data inappropriately, you can object. We'll review your request and explain our position.

Data Portability

You can request your data in a structured, machine-readable format to transfer to another service provider.

Withdraw Consent

For processing based on consent, you can withdraw it at any time. This won't affect processing that already occurred.

Cookies and Tracking

Our website uses cookies—small text files stored on your device. Here's what we use them for:

• Essential Cookies: These keep the website functioning properly and remember your preferences during your visit. You can't really turn these off without breaking the site.
• Analytics Cookies: We use these to understand how people use our site so we can improve it. These don't identify you personally.
• Communication Cookies: If you use our chat or contact forms, these help maintain your session.

We don't use advertising cookies or share cookie data with advertisers. You can control cookie settings through your browser, though disabling certain cookies may affect site functionality.

Third-Party Links

Our website occasionally links to external resources—tax authority sites, legal references, or industry publications. We're not responsible for the privacy practices of these sites. When you click a link that takes you elsewhere, their privacy policy applies, not ours.

Children's Privacy

Our services are designed for business owners and aren't intended for anyone under 18. We don't knowingly collect information from children. If we discover we've inadvertently collected such data, we'll delete it promptly.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.

The effective date at the top shows when this version took effect. We recommend checking back occasionally if you're curious about updates.

---

Previous versions are archived and available upon request if you need to reference earlier policies.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we'll notify you within 72 hours as required by Thai data protection law. We'll explain what happened, what data was affected, and what steps we're taking to address the situation.

You'll also receive guidance on any actions you should take to protect yourself. We take breaches seriously and work with appropriate authorities when necessary.

Complaints and Disputes

If you're concerned about how we've handled your personal information, please contact us first so we can address it directly. Most issues can be resolved through conversation.

If you're not satisfied with our response, you have the right to file a complaint with Thailand's Personal Data Protection Committee. We'll provide their contact information if you request it.