Privacy policy overview

This privacy policy explains what personal data dealioora collects when you contact us or use our services, how we process that data, the purposes for processing and how we store and protect information. We collect contact details, engagement documents and limited business identifiers necessary for legal advice and compliance tasks. Processing is carried out to provide legal services, manage the client relationship and meet regulatory obligations. We retain data only as long as required for those purposes and to comply with applicable law. For questions about data handling please contact our office at the address or email provided.

18-01-2026 dealioora (Business ID 3830179040470) 125/15, Thanon Na Mueang, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand [email protected]

Definitions

This section defines key terms used in this privacy notice to ensure clarity for business clients and their representatives. Definitions reflect the processing activities carried out by dealioora in the context of corporate legal services provided in Thailand and internationally. If you need further clarification, contact our data protection representative at the details below.

Personal data means any information relating to an identified or identifiable natural person. For the purposes of legal services for enterprises, this includes, where relevant, names of company directors, legal representatives, employees, contact details, identification numbers, professional profiles, and any other information that can identify an individual.
Processing refers to any operation or set of operations performed on personal data, whether automatic or manual. Typical processing activities by dealioora include collection, storage, retrieval, use, disclosure to third parties, archiving, deletion, and transfer in the context of providing corporate legal advice, contract drafting, regulatory compliance support, and dispute management.
User refers to any natural person whose personal data is processed in the provision of dealioora's services. In the context of our corporate legal work this normally includes company directors, authorized representatives, employees, clients' contact persons, and external advisors who interact with our firm.
Service refers to the range of legal services delivered by dealioora to businesses, including corporate formation, contract review and drafting, regulatory compliance advice, labor law counsel, dispute resolution support, due diligence and transaction support, and related legal administrative tasks.
Cookies are small data files placed on your device when you visit a website. dealioora uses cookies and similar technologies to operate the site, remember preferences, analyze usage patterns, and support essential security and performance functions.

Data Collection

dealioora collects personal data necessary to deliver professional legal services to enterprises and to operate the website. Collection is limited to data relevant and proportionate to the purposes described in this notice. We process data provided directly by users and technical data collected automatically during use of our digital services.

Data You Provide

The following categories of information are typically provided directly by clients, their representatives, or third-party contacts in the course of engaging dealioora for business legal services:

Identification and contact information: names, job titles, business phone numbers, business email addresses, postal addresses, and corporate registration numbers.
Corporate documents and records: company registration documents, partner registers, articles of association, contracts, board minutes, and due diligence materials submitted for review.
Transaction and matter-specific data: contract terms, transaction details, business schedules, and correspondence relevant to legal matters and advisory services.
Communications: written instructions, emails, meeting notes, and other correspondence platform with dealioora during the provision of services.
Compliance and verification data: tax identification numbers, government-issued identifiers where required for legal processes, and any documentation necessary for regulatory filings.
Consents and preferences: marketing preferences, contact consent, and any permissions or limitations provided by the client with respect to processing.

Automatically Collected Data

When interacting with dealioora's website and digital tools, we may collect technical and usage data automatically. This information helps maintain service availability, improve performance, and secure our systems.

Usage data: pages visited, access times, duration of the visit and navigation paths on the site.
Device and browser data: IP address, device type, browser version, operating system, and screen resolution.
Analytics data: aggregated metrics collected by analytics providers to help us understand site performance and user behavior.
Technical logs: server logs, error reports, and security event records kept to diagnose issues and detect abuse.
Cookie identifiers and similar tracking vouchers used to remember session state and user preferences.
Geolocation data when necessary to provide jurisdiction-specific legal content or for fraud prevention, collected in approximate form derived from IP address.

Third-Party Data Sources

dealioora may receive personal data from third parties when relevant to the legal services provided. Such sources are used only where necessary and subject to due diligence and contractual safeguards.

Corporate registries and public records accessed for verification of corporate status or due diligence.
Professional advisors and counterparties who provide documents and contact details as part of transactions or litigation support.
Service providers and technology platforms that support case management, communications, payment processing, and analytics.

Purposes of Processing

We process personal data for defined operational and legal reasons linked to delivery of legal services, firm administration, compliance with legal obligations, and the safeguarding of our clients' and our own legitimate interests.

To provide and manage legal services, including drafting documents, litigation support, negotiations, and legal advisory work for business clients.
To perform client onboarding, identity verification, due diligence, and anti–funds laundering checks where required by law or professional standards.
To communicate with clients and third parties regarding matters, appointments, billing and case progress.
To store and archive client files, maintain internal records, and manage professional conduct obligations and malpractice risks.
To comply with legal obligations and regulatory requests from courts, authorities, or law enforcement bodies in relevant jurisdictions.
To improve our services and website performance through analytics while minimizing personal identification in aggregated reports.
To manage billing, invoicing, and business records associated with the engagement and to process payments.
To protect the security and integrity of our systems and to prevent, detect and respond to fraud or abuse.

Legal Basis for Processing

dealioora relies on appropriate legal grounds for processing personal data depending on the context and jurisdiction. For clients in Thailand and those in other jurisdictions, processing is based on the following lawful bases:

Performance of a contract: processing necessary to provide legal services or to take steps at a client's request prior to entering into a contractual engagement.
Legal compliance: processing required to comply with statutory or regulatory obligations, including tax, corporate and anti-funds laundering laws.
Legitimate interests: processing necessary for the legitimate interests of dealioora such as case management, fraud prevention, and enforcement of our contractual rights, balanced against the rights and freedoms of the data subject.
Consent: where required for specific processing activities not otherwise justified, for example optional marketing communications or certain non-essential cookies; consent can be withdrawn at any time.

Cookies and Tracking

dealioora uses cookies and similar technologies on dealioora.info to enable essential site functions, measure site usage, and deliver a consistent, secure user experience. We aim to limit tracking to what is necessary for operation and improvement of the service.

Cookie types used include essential cookies for site operation, performance and analytics cookies for aggregated usage insights, preference cookies to remember display and language settings, and optionally marketing cookies if you consent to targeted content.

Essential cookies: required for navigation and security. Analytics cookies: used to collect anonymized usage statistics. Preferences cookies: store user settings. Marketing cookies: used only with explicit consent to support promotional content and partner integrations.

You can manage cookie preferences in your browser settings or via the cookie consent banner on our site. Disabling non-essential cookies may affect some site features. For detailed guidance, refer to your browser's help resources or contact our privacy officer.

Full Cookie Policy

Data Sharing

We share personal data only with categories of recipients necessary to deliver legal services, fulfill legal obligations, or support operational needs. All sharing occurs under contractual restrictions and confidentiality safeguards consistent with professional duties.

Professional recipients: external counsel, experts, auditors or consultants engaged on a matter and bound by confidentiality.
Service providers: trusted processors such as case management platforms, secure cloud hosting, email and payment processors acting under data processing agreements.
Regulatory and law enforcement bodies: where required by law, court order, or to respond to lawful requests.
Counterparties and transaction parties: where sharing is necessary to negotiate or execute a transaction and permitted by the client engagement.
Corporate affiliates: dealioora may share information with affiliated offices for purposes of centralized support and consistent client service delivery, under strict access controls.
Aggregated or anonymized information: used internally or shared publicly where personal identifiers have been removed and data cannot be reasonably linked to an individual.

International Data Transfers

Personal data processed by dealioora may be transferred to service providers, counterparties, or affiliates located outside Thailand when necessary for the provision of services. Transfers are conducted in accordance with applicable data protection laws, and we assess the adequacy of protections in destination jurisdictions.

Where transfers occur to jurisdictions without an adequacy decision, dealioora implements safeguards such as contractual data processing agreements including Standard Contractual Clauses, binding corporate rules for affiliated transfers, and technical and organizational measures to maintain an appropriate level of protection.

Security of Personal Data

dealioora applies technical, organizational, and administrative measures proportionate to the sensitivity of the data and the risk to individuals. Security controls are reviewed periodically to address evolving threats and to maintain confidentiality, integrity, and availability of client information.

Encryption of data at rest and in transit for systems used to store or transmit client information.
Role-based access controls and regular reviews of privileged accounts to limit access to authorized personnel only.
Incident response procedures, staff training, physical security of office premises, and secure disposal procedures for paper and electronic records.

Data Retention

dealioora retains personal data for the period necessary to fulfill the purposes described, to meet legal and professional requirements, and to allow resolution of any disputes. Retention periods vary by document type and jurisdictional requirements.

Client account and engagement records are typically retained for a minimum period required by Thai professional rules and tax law, commonly seven to ten years for business and corporate records, unless a different retention period is required by law or agreed with the client.

Communications and case-related correspondence are retained in client matter files for the duration of the engagement and for a period after closure as required for risk management, regulatory compliance, or to support potential future inquiries.

Technical logs and backup copies are retained for operational and security purposes for a limited period consistent with IT policies; backups may be held for an additional period to ensure recoverability, typically not exceeding industry-standard retention windows unless required otherwise.

When retention periods expire or data is no longer required, dealioora will secure deletion or anonymization of personal data in accordance with our policies. Deletion may be delayed to preserve information for legal or regulatory reasons; any such retention is documented and limited.

Your Rights

Individuals whose personal data is processed by dealioora have rights under applicable law. Requests will be handled promptly and in accordance with legal requirements and professional confidentiality obligations.

Right of access: request confirmation of processing and access to personal data held by dealioora.
Right to rectification: request correction of inaccurate or incomplete personal data.
Right to erasure: request deletion of personal data where no overriding legal or professional reason requires retention.
Right to restriction of processing: request limitation of processing in specified circumstances, for example during a dispute over accuracy.
Right to data portability: request a copy of personal data in a structured, machine-readable format where applicable.
Right to object: object to processing based on legitimate interests or to direct marketing processing.
Right to withdraw consent: where processing is based on consent, withdraw consent at any time without affecting processing prior to withdrawal.
Right to lodge a complaint with a supervisory authority if you consider that your rights under applicable data protection law have been infringed.

How to Make a Rights Request

To exercise your privacy rights or to submit questions about how we process personal data, contact our privacy officer with sufficient information to locate the relevant records. Provide your name, the organization you represent, a description of the request and the matter or file reference where applicable. We may require identity verification to protect confidentiality.

[email protected]

We aim to acknowledge requests promptly and respond within statutory timeframes applicable to the request. Where permitted by law, more complex requests may require additional time and we will inform you if an extension is necessary.

Marketing Communications

dealioora may send communications about services, seminars, or publications relevant to corporate legal practice where recipients have consented to receive such information or where permitted under professional client relationship rules. Communications are professional in nature and targeted to business recipients.

Recipients may opt out of marketing communications at any time by using unsubscribe links in emails or by contacting our privacy officer. Opting out will not affect communications necessary for the provision of legal services or required by law.

Children's Data

dealioora does not knowingly collect personal data from minors for the purpose of providing our corporate legal services. If personal data concerning children is provided unintentionally, please contact us so we can take appropriate steps to remove such data where lawful and practicable.

Third-Party Links

dealioora.info may contain links to third-party websites and resources. We are not responsible for the privacy practices or content of external sites. Users should review the privacy policies of any third party before providing personal data to them.

Changes to This Privacy Notice

This privacy notice may be updated to reflect changes in our practices, services, legal requirements, or technology. Material changes will be communicated by posting a revised version on dealioora.info with the effective date. Current effective date for this notice: 28-06-2026. For specific questions about updates, contact our privacy officer at the address below.

Privacy and Data Protection Contact

For questions about privacy practices, data access or deletion requests, contact the privacy officer at dealioora. Correspondence can be sent to our registered office: 125/15, Thanon Na Mueang, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand. Phone: +66991208863. Business ID: 3830179040470. Email: [email protected]. Our team aims to respond to formal privacy inquiries within 30 days and will advise on next steps and any documentation required to process requests.

+66991208863
[email protected]
125/15, Thanon Na Mueang, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand