1. Who we are

Visa Support Thailand (“we,” “us,” or “our”) is a private visa and immigration assistance service based in Chiang Mai, Thailand. We help clients prepare visa applications, supporting documents, and related submissions for Thai immigration and other related processes.

Contact Email: [email protected]

2. Scope of this Policy

This Privacy Policy applies to personal data collected through our website, forms, email, chat, phone, social media, in-person communication, and offline service interactions.

It explains how we handle personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the EU or UK General Data Protection Regulation (GDPR).

3. Personal data we may collect

Depending on your inquiry, case type, or service, we may collect personal data such as:

• Identity and contact information: full name, date of birth, nationality, passport details, email address, phone number, and address.
• Immigration and travel information: visa history, entry and exit records, photos, travel plans, and itinerary details.
• Employment or education information: employer details, job role, company documents, school enrollment records, and support letters.
• Financial or compliance information: bank letters, statements, income records, insurance documents, or other documents required by law or policy.
• Communications: emails, forms, chat messages, application details, call notes, and service-related correspondence.
• Technical and website information: IP address, device details, browser data, pages viewed, and cookie or analytics data.

We usually collect personal data directly from you. In some cases, with your authorization or where necessary to provide the service, we may also receive information from schools, employers, sponsors, translators, accountants, agents, or public authorities. :contentReference[oaicite:1]{index=1}

4. Why we process your data

We only process personal data where we have a lawful basis to do so, including:

• Contract or pre-contract: to answer inquiries, provide consultations, prepare quotes, and deliver services you request.
• Legal obligation: to comply with immigration rules, tax rules, anti-money laundering obligations, and record-keeping requirements.
• Legitimate interests: to operate, secure, improve, and administer our services and website.
• Consent: where consent is required for optional activities such as testimonials, certain marketing, or other non-essential processing.

Where we rely on consent, you may withdraw it at any time, although this will not affect any processing already carried out lawfully before withdrawal. :contentReference[oaicite:2]{index=2}

5. How we use personal data

We may use your personal data to:

• Assess eligibility and provide visa or immigration-related guidance.
• Prepare checklists, applications, support letters, and related documents.
• Coordinate with schools, employers, translators, couriers, insurers, or other service providers.
• Arrange appointments, submissions, or follow-up communications.
• Issue invoices, receipts, and maintain account records.
• Operate, secure, troubleshoot, and improve our website and services.
• Comply with legal, regulatory, audit, or enforcement requirements.

6. How we share personal data

We only share personal data when reasonably necessary to provide the service, comply with the law, or protect legitimate interests. Depending on the case, this may include sharing data with:

• Government authorities, immigration offices, embassies, and consulates.
• Schools, training centers, employers, or sponsors involved in your case.
• Third-party service providers such as translators, insurance providers, couriers, hosting services, analytics providers, and email tools.
• Professional advisors such as accountants or lawyers.
• Law enforcement, regulators, or public authorities where legally required.

We do not sell your personal data. :contentReference[oaicite:3]{index=3}

7. International data transfers

Some visa and immigration matters involve authorities, institutions, or service providers in different countries. As a result, your personal data may be transferred outside Thailand.

Where international transfers occur, we take reasonable measures permitted under applicable law to protect your data and only share what is necessary for the relevant purpose. :contentReference[oaicite:4]{index=4}

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, or as required by law, regulation, accounting rules, or audit obligations.

Typical retention periods may include:

• Client files: up to 10 years after case closure.
• Accounting records: 7 years, or longer if required by law.
• General inquiries without engagement: up to 24 months.
• Website logs and analytics: according to tool, vendor, or system defaults.

When the retention period ends, we securely delete, anonymize, or otherwise dispose of the data appropriately. :contentReference[oaicite:5]{index=5}

9. Data security

We use reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, misuse, loss, disclosure, or alteration.

These measures may include restricted access, least-privilege practices, secure storage, and encryption where appropriate. However, no system, website, email, or transmission method can be guaranteed to be completely secure.

10. Your rights

Under Thailand’s PDPA and, where applicable, GDPR, you may have rights relating to your personal data, including the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion, subject to legal or contractual limits.
• Restrict or object to certain processing activities.
• Request data portability where legally applicable and technically feasible.
• Withdraw consent where processing relies on consent.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding. You may also lodge a complaint with Thailand’s Personal Data Protection Committee or another relevant data protection authority. :contentReference[oaicite:6]{index=6}

11. Cookies and tracking technologies

We may use cookies and similar technologies to operate our website, maintain sessions, improve performance, and understand how visitors use the site.

• You can control cookies through your browser settings.
• Blocking some cookies may affect site functionality.
• If we use third-party analytics tools, those providers may set their own cookies in accordance with their own policies.

We generally use analytics information in aggregated form to understand site usage and improve performance. :contentReference[oaicite:7]{index=7}

12. Children’s privacy

Our services are generally intended for adults. We do not knowingly collect personal data from individuals under the age of 20, which is the age of majority under Thailand’s PDPA as stated on the current page.

If you believe that a minor has provided personal data to us without proper authorization, please contact us so we can review the situation and take appropriate action. :contentReference[oaicite:8]{index=8}

13. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy, content, or security practices of those third parties.

You should review the privacy policies of any external websites before providing personal information to them. :contentReference[oaicite:9]{index=9}

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page together with the effective date.

Where appropriate, material changes may also be communicated by email, website notice, or other reasonable means. :contentReference[oaicite:10]{index=10}