Privacy Policy — luxeoora

Definitions

The following definitions apply in this policy to clarify the terminology used for personal data, processing and the parties involved.

Personal data means any information relating to an identified or identifiable natural person, such as name, contact details, identification numbers and business contact information provided to luxeoora in the course of delivering services.
Processing means any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction.
User means a client, prospective client, supplier or visitor who interacts with luxeoora, whether online or in person, in relation to legal and advisory services for businesses.
Service means the legal and advisory services for entrepreneurs and businesses provided by luxeoora, including consultations, contract drafting, company registration assistance and related compliance support.
Cookies are small text files placed on a device to gather standard internet log information and visitor behavior information. They help luxeoora recognize repeat visitors and tailor our site behavior for improved user experience.

Data Collection

We collect personal data directly from you and automatically during your interaction with our website and services. Data collection is limited to what is necessary to provide and improve our legal services.

Data You Provide Directly

When you contact us, register for a service, or instruct us on legal matters, you may provide the following types of information:

Full name and professional contact details (email, telephone, postal address)
Business name, business registration and tax details relevant to the service
Identification documents and corporate documents required for compliance checks and filings
Business and payment information necessary to process invoices and payments
Details of contracts, agreements and transactions you ask us to review or prepare
Communications and information platform during consultations, including case details and instructions

Automatically Collected Data

When you visit our website or use online services, we automatically collect technical and usage data to operate the site securely and improve user experience.

IP address, browser type and version, device identifiers and operating system
Pages visited, session duration, click paths and referral sources
Location data derived from IP address (approximate)
Cookies and similar tracking technologies that store preferences and settings
Error logs, performance metrics and diagnostic information
Timestamps and metadata related to communications and form submissions

Data Received From Third Parties

We may receive personal data from trusted third parties to the extent necessary for service delivery and legal compliance.

Payment processors and banks for billing and transaction verification
Regulatory authorities and public registries for identity and company verification
Third-party service providers such as hosting, analytics and client relationship platforms supporting our operations

Purposes of Processing

We process personal data for specific and legitimate purposes related to running our legal services for entrepreneurs and for compliance with applicable laws.

To provide and manage legal services, consultations, document drafting and filings
To perform identity verification, anti-funds laundering checks and regulatory compliance tasks
To process payments, issue invoices and manage billing and collections
To communicate important updates, case status, and service-related notices
To improve our website, services and client support through analytics and feedback
To prevent and detect fraud, security incidents and abuse of our services
To maintain records required by law and respond to lawful requests from authorities
To send marketing communications where you have opted in and to manage your marketing preferences

Legal Bases for Processing

We rely on several lawful bases to process personal data depending on the activity involved. These bases include contractual necessity, compliance with legal obligations, consent and legitimate interests.

Performance of a contract: processing necessary to provide the legal services you requested.
Legal obligation: processing required to comply with Thai law and regulatory duties (e.g., tax, AML/KYC checks).
Consent: where you have explicitly agreed to certain processing such as marketing communications or optional analytics.
Legitimate interests: limited processing for fraud prevention, service improvement and secure operations, balanced against your privacy rights.

Data Subject Rights and GDPR-related Information

If GDPR applies to your interactions with luxeoora, you have rights to access and control personal data. We provide mechanisms to exercise these rights and will respond in a timely manner in line with applicable rules.

Right of access: request a copy of personal data we hold about you and information on how it is processed.
Right to rectification: request correction of inaccurate or incomplete personal data.
Right to erasure: request deletion of personal data where retention is no longer necessary and no overriding legal grounds exist.
Right to restrict processing: request limitation of processing where accuracy or legitimate grounds are in dispute.
Right to data portability: request transfer of provided personal data in a structured, commonly used format where technically feasible.
Right to object and withdraw consent: object to processing based on legitimate interests or withdraw consent for specific processing activities.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enable essential functions, analyze usage, and support personalized experiences. You can manage cookie preferences in your browser or via provided controls.

We use session cookies, persistent cookies, functional cookies for preferences, analytics cookies for performance measurement, and marketing cookies for tailored content and advertising.

Cookies are categorized as necessary (site operation), performance (analytics), functional (preferences) and advertising/marketing (third-party content and measurement).

You can manage cookie settings through your browser controls and any cookie consent tool presented on our site. Disabling certain cookies may affect site functionality.

/cookie-policy

Data Sharing and Disclosure

We share personal data with third parties only as necessary to provide services, comply with laws, or where you have given consent. We limit access and require partners to maintain appropriate protections.

Service providers and vendors who perform functions on our behalf, such as hosting, payment processing and analytics.
Legal and regulatory authorities when required by law, court order or for compliance with official requests.
Professional advisors such as accountants, auditors and external lawyers when engagement requires disclosure.
Trusted business partners and affiliates when needed to deliver a combined service you've requested.
Potential buyers or parties in connection with a corporate transaction, subject to confidentiality safeguards.
Third-party platforms and analytics providers to understand service usage and improve client experience.

International Data Transfers

Your personal data may be transferred to and stored in countries outside your jurisdiction, including service providers operating in other territories. Such transfers are limited to what is necessary for service delivery and operational support.

Where transfers occur, we use appropriate safeguards such as contractual data protection clauses, vetted service providers, and technical measures to protect personal data in transit and at rest.

Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy, or as required by applicable law and professional retention rules.

Account and client records are retained for a period consistent with legal, tax and regulatory requirements, typically several years after the end of the client relationship unless a different period is required.

Communications, case files and correspondence are kept for a period necessary to support service delivery, resolve disputes and meet professional record-keeping obligations.

Technical logs and analytics data are retained for limited operational periods used for monitoring, troubleshooting and service improvement.

When retention periods expire or you request deletion and no legal basis prevents removal, we will securely delete or anonymize personal data.

Security Measures

We implement administrative, technical and physical safeguards proportionate to the sensitivity of the data and the risks involved. Security measures are regularly reviewed to address emerging threats.

Encryption of data in transit and, where appropriate, data at rest to protect confidentiality.
Access controls, role-based permissions and authentication to limit access to authorized personnel.
Regular security reviews, staff training and contractual requirements for third-party processors to maintain protections.

Your Rights

You may exercise your data rights by contacting luxeoora using the details below. We will respond within applicable timeframes and provide guidance on required verification steps.

Right to access: request a copy of the personal data we hold about you.
Right to rectification and correction of inaccurate data.
Right to erasure/erase personal data where applicable.
Right to restriction or objection to certain processing activities and to withdraw consent where consent was the basis.
Right to lodge a complaint with a supervisory authority if you believe your data rights have been violated.
Right to restrict processing: You can request that we limit how we process your personal data in specific situations, such as when accuracy is contested or processing is unlawful. We will review such requests promptly and apply restrictions where appropriate under applicable law.
Right to object: You may object to our use of your personal information for direct marketing, or where processing is based on legitimate interests. We will assess objections and, where required by law, stop the contested processing unless we have a compelling lawful basis to continue.
Right to lodge a complaint: If you believe your privacy rights have been violated, you may file a complaint with the Office of the Personal Data Protection Committee of Thailand or another competent supervisory authority. We also welcome the opportunity to address your concerns directly first.

How to exercise your privacy rights

To exercise any of the rights described above, contact our Data Protection Officer at the address or phone below, or by email via the contact form at luxeoora.click. Please specify the right you wish to exercise and provide enough detail for us to verify your identity and process your request. We aim to respond promptly and transparently while protecting the privacy and safety of other individuals.

[email protected]

Response timeframe: We strive to respond to verified requests within 30 days of receipt. Complex requests may take longer; if so, we will notify you and provide an estimated timeline and reasons for the delay.

Marketing communications and choices

We may send marketing messages about services that may interest you, such as business compliance updates, contract templates, and legal consultation offers from luxeoora. Marketing messages will only be sent with your consent where required by law. Each marketing message includes an easy way to opt out. We respect your preferences and will stop sending marketing communications after an opt-out request is processed.

Opt-out: To stop receiving marketing communications, click the unsubscribe link provided in the email or contact us at +66938435766. It may take up to 7 days to process your request. Unsubscribing from marketing messages will not affect other transactional or service-related communications.

Children's privacy

Our services are intended for business users and adults. We do not knowingly collect personal data from children under the age of 15. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly. If you believe we may have data from a child, contact us so we can contribute and act.

Third-party links

Our website may include links to third-party services, partners, or resources. These third parties have their own privacy practices and are not controlled by luxeoora. We recommend reviewing their privacy policies before providing personal data. We are not responsible for the privacy or data practices of external sites.

Changes to this privacy notice

We review our privacy practices periodically. When changes are necessary, we will update this policy and indicate the effective date. Material changes that affect how we use your personal data will be communicated by posting a clear notice on luxeoora.click and, where appropriate, by direct communication.

General Privacy Information