Privacy Policy
This Privacy Policy explains how myrealtorti collects, uses, retains and shares personal data in connection with the provision of corporate legal services in Thailand. It describes the categories of information processed, the purposes of processing, legal bases relied upon, data subject rights and contact details for inquiries. We process data in a professional and security-focused manner to support client matters, compliance and business operations.
Key definitions
The following definitions clarify terms used in this policy to help clients and website visitors understand how personal data is handled by myrealtorti.
Data we collect
We collect data that is necessary to deliver professional legal services, manage client relationships and operate our website securely and efficiently. Collection occurs through direct client interactions, website forms and through automated technologies when you use our online resources.
Information you provide directly
When engaging with myrealtorti or using contact forms, clients and prospects may provide the following categories of data required to perform legal work and client onboarding.
- Identification details: full name, national ID or passport number, business registration number where applicable.
- Contact information: business address, email address and telephone number.
- Corporate records and documentation: articles of incorporation, partner registers, contracts and business statements necessary for legal analysis.
- Case-specific information: factual statements, communications, evidence and other materials relevant to a legal matter.
- Billing and payment details: invoicing address and payment transaction information needed to administer fees.
- Communications preferences and consent choices provided during engagement or via our website.
Information collected automatically
When you visit myrealtorti.digital or interact with our online tools we may automatically collect technical information that helps us operate the site and improve user experience.
- Device and browser information: device type, operating system, browser version.
- Usage data: pages viewed, time spent on pages, click paths and interaction events.
- Log data: IP address, access times and server logs used for security and troubleshooting.
- Analytics identifiers: anonymous identifiers used by analytics tools to measure site performance.
- Cookies and similar identifiers as detailed in our cookie section.
- Automated processing may be used to classify corporate records, flag potential compliance issues, and manage contract lifecycles. These systems operate on predefined legal criteria and rule sets overseen by experienced lawyers at myrealtorti; any material or adverse determinations are subject to human review. Only data strictly necessary for the stated purpose is processed, and retention and access controls follow applicable Thai law and our internal data policies.
Data from third-party sources
We may receive personal data about clients and related parties from third parties when necessary to perform legal services or comply with legal obligations.
- Referrers and introducers such as professional advisers who provide client documents or background information.
- Publicly available sources such as corporate registries, court records and regulatory databases.
- Service providers who perform identity verification, anti-funds laundering checks or credit assessments on our behalf.
Purposes of processing
We process personal data for a limited set of professional purposes required to provide legal services, administer client relationships and meet legal obligations.
- Client onboarding and identification checks for anti-funds laundering and Know Your Client procedures.
- Provision of legal advice, contract drafting, litigation support and other legal services requested by the client.
- Management of client accounts, billing, collections and payment processing.
- Compliance with statutory and regulatory obligations, including disclosures to competent authorities where required by law.
- Operational and administrative purposes such as case management, recordkeeping and quality control.
- Security, fraud prevention, and protection of our systems and client data.
- Service improvement, aggregated analytics and website performance monitoring.
- Communications regarding services, changes to terms, and responding to inquiries or complaints.
Legal bases for processing
We rely on appropriate legal bases to process personal data depending on the nature of the processing and the relationship with the data subject.
- Performance of a contract: processing necessary to provide legal services requested by a client.
- Legal obligation: processing required to comply with statutory, regulatory or judicial requirements, including anti-funds laundering laws.
- Legitimate interests: processing for operational functions such as security, fraud prevention and managing our client relationship where those interests are not overridden by individual rights.
- Consent: where required for certain marketing communications or optional services, provided that consent is freely given and can be withdrawn.
Rights under applicable data protection laws
Depending on the jurisdictional connection to data protection frameworks, data subjects may have the following rights regarding their personal data processed by myrealtorti.
- Right of access: request confirmation of whether we process personal data and obtain a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete personal data we hold.
- Right to erasure: request deletion of personal data where processing is no longer necessary and no legal obligations require retention.
- Right to restriction of processing: request limits on how we use your personal data in certain circumstances.
- Right to data portability: request a copy of data in a commonly used, machine-readable format where applicable.
- Right to lodge a complaint with a supervisory authority if you consider your data protection rights have been infringed.
Data sharing and recipients
We share personal data only where necessary to provide services, comply with law or operate our business. Recipients are carefully selected and bound by confidentiality obligations.
- Legal and tax advisors engaged to support client matters under professional confidentiality rules.
- Third-party service providers such as IT hosting, document storage and client management platforms acting under contract and confidentiality terms.
- Regulatory, judicial or law enforcement authorities when required by applicable law or court order.
- Payment processors and banks for billing, collections and transaction reconciliation.
- Professional indemnity insurers or dispute resolution providers where disclosure is necessary in relation to a claim or case.
- Potential acquirers or business partners in the event of a reorganization or sale of all or part of our business, subject to appropriate safeguards.
International transfers of data
Personal data may be transferred to service providers or counterparties located outside Thailand for processing. Such transfers are limited to jurisdictions necessary to deliver services or host infrastructure.
When transfers occur we implement safeguards such as contractual data protection clauses, reliance on recognized transfer mechanisms, and technical measures including encryption to protect data in transit and at rest.
Data retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, to meet legal and regulatory obligations, and for legitimate operational needs such as recordkeeping and dispute resolution.
Client records and engagement files are retained in accordance with professional practice requirements and applicable Thai retention rules; typically for several years after matter conclusion to meet legal, tax and professional obligations.
Communications (email and messages) related to active matters are retained for the duration of the matter and archived thereafter according to our retention schedule, unless a longer period is required by law.
Technical logs and access records are kept for operational and security purposes for a limited period, generally aligned with industry best practices and legal requirements.
When personal data is no longer required, we securely delete or anonymize it. If deletion is not possible due to legal or technical reasons, we restrict access and continue to protect the data appropriately.
Security of personal data
myrealtorti maintains organizational and technical safeguards to protect personal data against unauthorized access, alteration, disclosure or destruction. Measures are appropriate to the sensitivity of the data and the risks involved in the processing.
- Access controls and role-based permissions to limit data access to authorized personnel only.
- Encryption of data in transit and at rest for systems that process sensitive client information.
- Regular security reviews, staff training, incident response procedures and contractual obligations for third-party processors.
User rights and how to exercise them
You may exercise your rights in relation to your personal data as described above. We respond to valid requests promptly and in accordance with applicable legal timeframes.
- To submit a request for access, correction, deletion or restriction, contact our privacy officer using the contact details below. Please provide sufficient information to identify the records you seek to control.
- We may need to verify your identity before fulfilling a request to protect data security. We will inform you of any lawful grounds for refusing a request.
- If you remain dissatisfied after contacting us, you may lodge a complaint with the relevant supervisory authority in your jurisdiction.
- Right to restriction of processing: You may request limitation on certain processing activities when accuracy is contested, processing is unlawful but you oppose erasure, or when data is needed for legal claims.
- Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request a structured, commonly used, machine-readable copy of personal data you provided to myrealtorti.
- Right to object: You have the right to object to processing of your personal data for direct marketing, profiling related to marketing, or processing based on legitimate interests, subject to applicable legal grounds.
- Right to lodge a complaint: If you consider our processing unlawful or that your rights are not respected, you may lodge a complaint with a competent supervisory authority in Thailand or contact our privacy representative listed below.
- Right to withdraw consent: Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Exercising Your Privacy Rights
To exercise any privacy right, submit a request to our Data Protection Team at [email protected] or by post to our registered address. Include a clear description of the right you wish to exercise, the data categories concerned and any supporting documents required to verify your identity. We will assist with reasonable steps to help you make and track requests efficiently.
We aim to acknowledge requests within 3 business days and provide a substantive response within 30 calendar days of receipt. Complex requests or requests requiring identity verification may extend the response time; if so we will notify you and explain the reason and expected timeline.
Marketing Communications
myrealtorti may use contact details provided by clients and prospects to send information about legal services, updates relevant to corporate compliance, and event invitations tailored to businesses in Thailand. We limit direct marketing to relevant professional services and respect preferences expressed by recipients.
To stop receiving marketing communications, click the unsubscribe link in any marketing email or send an opt-out request to [email protected]. We process unsubscribe requests promptly and will update your preferences without undue delay.
Children and Minors
myrealtorti does not provide services to minors or intentionally collect personal data from children under the age of majority in Thailand. If we learn that we have collected personal data from a minor without appropriate authorization, we will take steps to delete such data in accordance with applicable law.
Third-Party Links
Our website may link to third-party sites or services for convenience. Those sites have their own privacy practices that govern their use of personal data. myrealtorti is not responsible for the content or privacy policies of third parties. Review each third party’s privacy terms before providing personal information.
Policy Changes
We review and may update this Privacy Policy to reflect changes in law, technology, or our practices. Material changes will be posted on myrealtorti.digital with an updated effective date. Continued use of our services after publication indicates acceptance of the updated policy.