Privacy Policy

Introduction

Vossalin is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you engage our corporate formation services or visit our website.

This policy applies to all personal data processed by Vossalin in connection with our corporate formation, business registration, and related professional services. We comply with Thailand's Personal Data Protection Act B.E. 2562 (2019) and follow industry best practices for data protection.

For questions regarding this Privacy Policy or how we handle your personal data, please contact us at [email protected].

Data Collection Information

What Personal Data We Collect

We collect personal data that is necessary to provide our corporate formation services and maintain professional relationships with clients. The data we collect includes:

• Contact information: name, email address, phone number, business address
• Identification documents: passport copies, national ID cards (as required for company registration)
• Business information: company name, business activity description, ownership structure
• Financial information: registered capital amounts, shareholder investment details
• Communication records: emails, phone calls, meeting notes related to service delivery
• Website usage data: IP address, browser type, pages visited, time spent on site

How Data is Collected

We collect personal data through the following channels:

• Direct submission via contact forms on our website
• Email communications and consultation requests
• Phone conversations and in-person meetings
• Document submissions for company registration applications
• Cookies and analytics tools on our website (see Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have provided explicit consent for us to process your data for specified purposes
• Contract performance: Processing is necessary to fulfill our service agreement with you
• Legal obligation: Processing is required to comply with Thai legal and regulatory requirements
• Legitimate interest: Processing is necessary for our business operations while respecting your rights

Data Retention Periods

We retain personal data for different periods based on the type of information and applicable legal requirements:

• Client registration documents: 7 years from completion of service (Thai accounting law requirement)
• Communication records: 3 years from last interaction
• Marketing consent data: Until consent is withdrawn or 3 years of inactivity
• Website analytics data: 14 months from collection

Data Usage Explanation

How We Use Your Personal Data

We use collected personal data for the following purposes:

• Service delivery: Preparing company registration documents, filing applications with government authorities
• Client communication: Responding to inquiries, providing updates on application status, post-registration support
• Compliance: Meeting legal obligations under Thai business law and regulatory requirements
• Business improvement: Analyzing service usage to enhance our offerings and client experience
• Marketing (with consent): Sending information about our services, industry updates, and company news

Data Sharing with Third Parties

We may share your personal data with the following categories of third parties when necessary for service delivery:

• Government authorities: Department of Business Development, Board of Investment (for application processing)
• Professional service providers: Translation services, document authentication services
• Technology service providers: Email hosting, website analytics, secure document storage
• Legal advisors: When required for complex regulatory matters

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

Marketing Communications

We may send marketing communications about our services if you have opted in to receive such information. You can withdraw consent at any time by clicking the unsubscribe link in our emails or contacting us at [email protected].

Data Protection Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, or alteration. Our security practices include:

• Encryption: Data transmission and storage use industry-standard encryption protocols
• Access controls: Personal data is accessible only to authorized personnel who require it for their duties
• Secure storage: Physical documents stored in locked facilities with restricted access
• Digital security: Firewall protection, secure servers, regular security updates
• Employee training: Staff receive training on data protection obligations and best practices
• Breach procedures: We have protocols in place to detect, report, and investigate data breaches
• Regular audits: Periodic review of data protection practices and security measures

In the event of a data breach that poses high risk to your rights, we will notify affected individuals and relevant authorities within the timeframes required by Thai law.

Cookie Information

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential cookies: Required for website functionality and security
• Analytics cookies: Help us understand how visitors use our site (with your consent)
• Preference cookies: Remember your settings and preferences (with your consent)

For detailed information about cookies we use and how to manage your cookie preferences, please see our Cookie Policy.

Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

Access and Portability

You have the right to request access to your personal data we hold and receive a copy in a commonly used, machine-readable format.

Rectification

You may request correction of inaccurate or incomplete personal data.

Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.

Objection to Processing

You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interest.

Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Lodge a Complaint

You have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by Thai law.

Third-Party Links

Our website may contain links to third-party websites for your convenience. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are intended for business professionals and individuals aged 18 years and older. We do not knowingly collect personal data from minors under 18 years of age. If we become aware that we have collected data from a minor, we will take steps to delete such information.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date.

Continued use of our services after policy updates indicates your acceptance of the revised terms. We encourage you to review this policy periodically to stay informed about how we protect your personal data.