Privacy Policy
Visa work means handling some of the most personal documents you own. This policy explains what we collect, why we need it, who we share it with and the rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
On this page
On this page01Who we are
This website and our services are operated by VisaLuxe Hua Hin ("VisaLuxe", "we", "us"), a visa and document consultancy based in Hua Hin, Prachuap Khiri Khan, Thailand, serving clients throughout Thailand.
For the purposes of the PDPA, VisaLuxe is the data controller of the personal data described in this policy. You can contact us about anything in this policy using the details in the last section.
02What we collect
The information we collect depends on the service you use. It may include:
- Identity and contact details — name, date of birth, nationality, address, phone number, email, LINE or WhatsApp ID.
- Identity documents — passport, Thai ID card, house registration, previous visas and travel history.
- Civil status documents — birth, marriage, divorce and name-change certificates, and similar records.
- Work and financial information — employment letters, business registration, bank statements, income, pension and property documents.
- Travel and relationship information — itineraries, bookings, invitation letters, relationship evidence and information about your sponsor or host.
- Photographs — passport and visa photos required by the authorities.
- Communications — messages, calls and emails between you and our team.
- Website data — basic technical information such as browser type and pages visited (see Cookies).
Sensitive data
Some applications require sensitive personal data as defined by the PDPA, such as criminal record certificates, medical or health information, or information that appears on official documents (for example religion on some Thai records). We only collect sensitive data when your application requires it, and only with your explicit consent.
Information about other people
Applications often include details of family members, partners, children, sponsors or hosts. If you give us someone else's information, please make sure they know you are sharing it with us and why.
03Why we use it
We use your personal data to:
- assess your situation and advise you on the right visa or service;
- prepare, translate, certify and legalise documents;
- complete and lodge applications and book appointments on your behalf;
- accompany you on submission or biometrics day where this is part of the service;
- communicate with you about your case, payments and results;
- keep accounting and tax records required by Thai law;
- improve our services and protect our legal rights.
We do not sell your personal data, and we do not use your documents for marketing.
04Legal basis
Under the PDPA we rely on the following legal bases:
- Contract — processing needed to provide the service you have asked for, or to take steps at your request before you engage us.
- Legal obligation — for example keeping accounting and tax records.
- Legitimate interests — running and improving our business and handling disputes, where this does not override your rights.
- Consent — for sensitive data, and for marketing messages if you choose to receive them. You can withdraw consent at any time, although this may mean we cannot continue a service that depends on it.
06International transfers
Many of our services involve sending your data outside Thailand — for example to a foreign government when you apply for a visa. These transfers are made at your request and are necessary to perform the service you engaged us for, as permitted under the PDPA.
Some of our service providers (for example email, cloud storage, LINE and WhatsApp) may also store data on servers outside Thailand. We choose reputable providers and only share what is needed.
07How long we keep it
- Case files — kept while your case is active and for up to 3 years after it closes, so we can help with renewals, re-applications or questions from the authorities.
- Accounting records — kept for the period required by Thai accounting and tax law (generally at least 5 years).
- Enquiries that do not become a case — deleted within 12 months.
Original documents are returned to you when your case is finished. When the retention period ends we securely delete or destroy the data. You can ask us to delete your data earlier — see Your rights.
08How we protect it
Access to your documents is limited to the team members working on your case. We store files in password-protected systems, use secure channels where possible and keep physical documents in a secure place while they are with us.
No system is completely secure. If a data breach occurs that is likely to affect your rights, we will notify the relevant authority and you as required by the PDPA.
09Your rights
Under the PDPA you have the right to:
- access and receive a copy of your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to delete or anonymise your data;
- ask us to restrict how we use your data;
- object to processing based on legitimate interests or for marketing;
- receive your data in a commonly used electronic format, or have it sent to another controller;
- withdraw consent you have given.
To use any of these rights, contact us. We will respond within 30 days. Some rights are limited by law — for example we must keep accounting records — and we will explain if we cannot meet a request.
You also have the right to complain to the Office of the Personal Data Protection Committee (PDPC) of Thailand.
11Children
Some services, such as passports and visas for children, require information about minors. We only collect a child's data from a parent or legal guardian, or with their consent, and only for the child's application.
12Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with its effective date. If we make significant changes, we will let current clients know.
13Contact us
For questions about this policy or to use your rights, contact VisaLuxe Hua Hin: