Privacy Policy Overview
dealixko is committed to handling personal information responsibly when providing legal services for pensioners and other clients in Thailand. This policy explains what data we collect, why we use it, how we protect it, and the choices available to you. We collect only information necessary to deliver legal advice, prepare documents, and communicate securely. Our approach emphasizes transparency, limited retention, and secure storage to minimize risk. For questions or to exercise your rights, contact our data protection contact below. Our office is located at 384, Thanon Somdet Phra Chao Tak Sin, Thon Buri Sub District, Bangkok District, Bangkok 10600, Thailand.
Key definitions
This section explains terms used in this policy to help you understand how we describe personal data, processing activities, users, and services.
Data we collect
We collect data directly from you and automatically through our website and systems. We limit collection to information needed to deliver services and to comply with legal and regulatory requirements.
Information you provide
When you contact us, register, or instruct our lawyers, we may collect the following types of information to manage your matter effectively.
- Identification details: name, date of birth, national ID or passport number.
- Contact information: address, phone number, and email address.
- Case information: details of your legal matter, relevant documents, business information related to estate planning, and beneficiary details.
- Consent and preferences: communication preferences, expressed consent for specific actions, and instructions for legal representation.
- Payment and billing details: invoicing information and payment method details necessary to process legal fees.
- Third-party authorizations: copies of power of attorney, medical directives, or authorizations to communicate with relatives or caregivers.
Automatically collected information
When you use our website or contact services, we may collect technical and usage data to improve functionality and security.
- Device and browser information: device type, operating system, browser version, and screen resolution.
- Log data: IP address, access times, pages viewed, and errors encountered.
- Usage analytics: anonymized metrics about how visitors use our site to improve navigation and content.
- Location data: approximate location derived from IP address to route local services appropriately.
- Security signals: data used to detect suspicious activity and protect accounts.
- Cookie identifiers: non-personal identifiers stored by cookies to manage sessions and preferences.
Third-party sources
We may receive data about you from third parties when necessary to provide our services or comply with legal obligations.
- Public records and registries relevant to estate and property matters.
- Referrers and legal partners who provide case background or documents.
- Payment processors for transaction validation and fraud prevention.
How we use personal data
We process personal data for the following purposes, always limited to what is necessary to provide legal services and manage client relationships.
- To deliver legal advice and prepare documents such as wills, powers of attorney, and estate administration filings.
- To manage client communications, schedule appointments, and provide updates about your matter.
- To process payments, invoices, and accounting related to legal fees.
- To verify identity and perform due diligence required by Thai law or regulatory authorities.
- To maintain records for case management, audits, and where necessary for legal defense or dispute resolution.
- To improve our services and website through aggregated, anonymized analytics.
- To protect our systems and users from fraud, abuse, and security incidents.
- To comply with legal obligations, court orders, or lawful requests by government agencies.
Legal basis for processing
We rely on legitimate grounds to process personal data, ensuring each processing activity has an appropriate legal basis under applicable law.
- Contractual necessity: processing required to perform our engagement and provide legal services you requested.
- Legal compliance: processing necessary to comply with statutory obligations or respond to lawful requests.
- Legitimate interests: processing for fraud prevention, security, and improving our services where those interests do not override your rights.
- Consent: when you provide explicit consent for specific marketing or non-essential uses, which you may withdraw at any time.
Rights and access to your data
Although GDPR is an EU regulation, we recognize similar privacy rights and provide mechanisms to exercise them. If you are a data subject with applicable rights, you may request the following actions.
- Access: request a copy of personal data we hold about you.
- Correction: request correction of inaccurate or incomplete information.
- Deletion: request erasure of personal data where lawful and reasonable.
- Restriction: request limitations on processing in some circumstances.
- Objection: object to processing based on legitimate interests, except where legal obligations require continued processing.
- Portability: request transfer of structured personal data to another controller when technically feasible.
Sharing and disclosure
We share personal data only when necessary to provide services, meet legal obligations, or with your consent. We limit recipients and require safeguards.
- Law firms and legal partners assisting on a specific engagement under confidentiality terms.
- Government agencies, courts, or regulators when required by law or to comply with legal processes.
- Payment processors and business institutions to handle billing and transactions.
- Third-party service providers performing IT, storage, or analytics functions under data processing agreements.
- Authorized family members or caregivers when you provide written consent or a valid power of attorney.
- Professional advisors such as notaries or medical professionals when necessary to support your legal matter and with appropriate authorization.
International transfers
Some processing may involve service providers located outside Thailand. We take steps to ensure adequate protections, including contractual safeguards and careful vendor selection.
When transferring data internationally, we use data processing agreements, confidentiality clauses, and where applicable, recognized transfer mechanisms to protect your information.
Data retention
We retain personal data only as long as necessary to fulfill the purposes described, to meet contractual obligations, and to comply with legal or regulatory retention periods.
Client files and account records are retained in accordance with professional standards and Thai legal requirements for a period appropriate to the matter type, typically several years after case closure.
Communications and case notes are retained for case management and to resolve disputes. Non-essential marketing communications are retained until you opt out.
Security logs and access records are retained for a limited period to support security monitoring, then anonymized or deleted according to our retention schedule.
When data is no longer required, we securely delete or anonymize it unless legal obligations require longer retention.
Security measures
We implement organizational and technical measures to protect personal data from unauthorized access, disclosure, alteration, and loss. Measures are reviewed periodically and adjusted to address evolving threats while keeping client needs in focus.
- Access controls, encrypted storage for sensitive documents, and secure communication channels for transmitting client information.
- Regular security reviews, staff training on confidentiality, and contractual safeguards with service providers.
- Periodic internal audits and role-based access controls to limit staff access to personal data only when required to perform a requested legal task.
Your choices and rights
As a client or visitor of dealixko, you have rights regarding your personal data. You can request access, correction, restriction of processing, deletion where applicable, data portability, and object to certain uses. If you are a legal representative acting for a pensioner, you may exercise these rights on their behalf with appropriate documentation.
- Right to access: request a copy of the personal information we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of personal data where processing is no longer necessary or consent is withdrawn and no other legal basis applies.
- Right to restriction: request that processing of your data be limited while a dispute about accuracy or lawfulness is resolved.
- Right to data portability: request a structured, commonly used, machine-readable copy of data you provided.
- Right to object: object to direct marketing or processing based on our legitimate interests, where applicable.
- Right to withdraw consent: when we rely on consent for processing, you may withdraw it at any time without affecting processing prior to withdrawal.
- Right to lodge a complaint: if you have concerns about how we process your data, you may contact us or the relevant supervisory authority in Thailand.
How to exercise your privacy rights
To submit a request concerning your personal data, contact our data protection contact with your full name, a description of the requested action, and proof of identity or authority if you act for someone else. We may request additional information to verify your identity and to locate the requested records. Requests should be sent via email or postal mail using the contact details below.
We aim to respond to verified requests within 30 days of receipt. If your request is complex or we need additional time, we will inform you and strive to complete our response promptly and no later than 60 days.
Marketing communications
We may contact you with information about services, events, or legal updates relevant to pensioners if you have opted in. Marketing messages will be clearly identified and limited to topics relevant to elder legal needs, such as estate planning, pension rights, and consumer protection for seniors.
You can opt out of marketing at any time by using the unsubscribe link in emails, updating your preferences in your account, or contacting us directly. Opting out will not affect transactional messages about your ongoing legal matters.
Children and minors
dealixko provides legal services focused on pensioners and older adults. We do not knowingly collect personal information from children under the age of 18 for client services. If we become aware that we have collected data from a minor without proper authorization, we will take steps to remove the information as required by law.
Third-party websites and services
Our site and communications may include links to third-party websites, tools, or partner services. These external sites have their own privacy practices and are not covered by this policy. We encourage you to review their privacy notices before sharing personal information.
Changes to this privacy policy
We may update this privacy policy to reflect changes in our services, legal obligations, or business practices. Material changes will be posted on our website with an updated effective date. Last updated: 16-05-2026.