Privacy Policy

This section defines key terms used in the policy so you can understand what types of information and activities are covered.

We collect information needed to deliver services, comply with legal obligations and operate the website securely. We limit collection to what is necessary for these purposes.

At Taxonelaw we collect the personal and business information you provide so we can deliver precise tax and legal services tailored to your needs in Thailand. Collected data may include contact details, company registration and Business ID 4946347696040, business records, identification documents, correspondence and any documents you upload. We use this information to prepare filings, advise on compliance, communicate about your matter, and fulfill legal or regulatory obligations. Processing is based on performing our contract with you, your consent where required, and compliance with Thai law. We protect your data with industry-standard technical and organizational measures such as secure servers, encryption in transit and at rest, and restricted access for authorized staff only. We retain information only for as long as necessary to provide services and to meet statutory retention periods under Thai law. You have the right to access, correct, restrict processing, withdraw consent, or request deletion of your personal data, subject to legal and contractual limitations. For faster service and clearer advice, please provide accurate and complete information when you first contact us. If you have questions or wish to exercise your rights, contact Taxonelaw at +66969236132 or visit our office at Ko Kaeo Sub District, Amphoe Selaphum District, Performance Et Province 45120, Thailand. Effective date: 2026-04-20.

• Contact details: name, business email, phone number and address provided when you sign up or contact us.
• Business information: company name, registration numbers, tax ID and incorporation documents needed to provide tax and legal services.
• Business documents: invoices, bank details, payroll records and tax filings submitted to Taxonelaw for processing.
• Identification documents: scanned ID or passport copies when required for registration or compliance checks.
• Communications: messages, emails and notes from consultations that help us deliver services.
• Service preferences: chosen plans, consent for communications and settings related to your account.

When you visit taxonelaw.info or use our online services, some technical data is collected automatically to support functionality, analytics and security.

• Device and browser information, including device type, operating system and browser version.
• IP address and general geographic location inferred from the IP for security and fraud prevention.
• Usage data such as pages visited, session duration and feature interactions for site improvement.
• Cookies and similar tracking technologies used to remember preferences and enable basic site functions.
• Server logs and technical metadata created when services are accessed.
• Performance and error reports to diagnose and fix issues with the website or services.

We may receive information about you from trusted third parties to complete transactions, verify identity or comply with legal obligations.

• Payment processors and banks to process billing and reconcile payments.
• Government agencies and tax authorities for registration and compliance purposes.
• Professional advisors or auditors when relevant to providing services or responding to official requests.

We process personal data to deliver contracted services, meet legal obligations and operate the website. Each purpose is limited to the data necessary to achieve it.

• Providing and managing tax, bookkeeping and legal services you request.
• Processing payments, invoices and business transactions on behalf of your business.
• Complying with Thai tax laws and regulatory reporting requirements.
• Maintaining accounts, records and documentation required for audits or inspections.
• Improving our services, website performance and client support through aggregated analytics.
• Protecting systems and clients by detecting and preventing fraud or unauthorized access.
• Responding to legal claims, law enforcement requests or official contribute.
• Sending service-related notifications and, where you consent, marketing information about relevant offers.

We rely on appropriate legal bases to process personal data. For clients in Thailand, processing is typically necessary for contract performance, compliance with law, or with your consent where applicable.

• Contractual necessity: processing required to provide services you have requested.
• Legal obligation: processing needed to comply with statutory duties and tax law in Thailand.
• Legitimate interests: limited processing for security, fraud prevention and direct business operations where interests are balanced with your rights.
• Consent: when you explicitly opt in to marketing communications or optional features.

Cookies and similar technologies are used to enable site functions, remember preferences and measure performance. You can manage cookie settings in your browser or through available controls on the site.

We use essential cookies for site operation, analytics cookies to understand usage patterns, and optional cookies for preferences or marketing where you have given consent.

Categories include strictly necessary, performance and analytics, functionality, and marketing. We do not use intrusive tracking without explicit consent.

You can control cookie preferences through your browser settings or the cookie banner on taxonelaw.info. Disabling some cookies may affect site functionality.

View our full cookie policy

We share personal data only with trusted parties necessary to deliver services, meet legal requirements, or as directed by you. Shared data is limited to what is needed for the recipient's purpose.

• Service providers and subcontractors who assist with payments, cloud hosting, analytics and document storage.
• Banks and payment processors when handling billing and reimbursements.
• Thai tax authorities, regulators and government bodies for compliance and reporting requirements.
• Professional advisors, auditors and legal counsel engaged to support service delivery or disputes.
• Law enforcement or courts when required by law or to protect legal rights.
• Other parties where you have given explicit consent to share information.

Some service providers or cloud systems may store or process data outside Thailand. When transfers occur, we take steps to ensure an adequate level of protection and limit transferred data.

Safeguards include contractual protections, data minimization, encryption in transit and at rest, and choosing providers that meet recognized security standards.

We retain data only as long as necessary to provide services, meet legal obligations and resolve disputes. Retention periods consider regulatory requirements and legitimate business needs.

Account and business records are retained while your account is active and thereafter for up to 7 years where retention is required for tax or regulatory compliance in Thailand.

Communications and messages related to service delivery are retained for up to 3 years, unless a longer period is required for legal reasons.

Technical logs and analytics data are retained for up to 12 months to support security, performance monitoring and troubleshooting.

You can request deletion of personal data where permitted. Deletion requests are subject to retention obligations and may be limited if data must be kept for legal compliance or legitimate business reasons.

Taxonelaw implements administrative, technical and physical measures to protect personal data. These measures are designed to reduce risks such as unauthorized access, disclosure, loss or alteration.

• Encryption of sensitive data in transit and at rest using industry-standard protocols.
• Access controls and role-based permissions to limit data access to authorized personnel only.
• Regular staff training on data handling, incident response procedures and confidentiality obligations.

Depending on local law and your situation, you may have rights to access, correct, delete or restrict processing of your personal data. We provide clear channels to exercise these rights.

• Right to access and obtain a copy of personal data held about you and to request correction of inaccurate information.
• Right to request deletion, restriction of processing, or to object to certain uses of your personal data where applicable under law.
• Request correction of inaccurate or incomplete personal information held by Taxonelaw.
• Request deletion of personal data when processing is no longer necessary or legal basis no longer applies, subject to applicable law.
• Request restriction of processing while a dispute about accuracy or lawful basis is being resolved.
• Object to processing based on legitimate interests, direct marketing, or profiling where relevant and lawful.
• Request portability of data in a structured, commonly used, and machine-readable format when processing is based on consent or contractual necessity.
• Withdraw consent at any time for processing activities that rely on consent, without affecting processing prior to withdrawal.

Although Taxonelaw operates in Thailand, we recognize the importance of data protection principles that align with international standards. Where EU data protection rules apply to individuals, we follow established GDPR-style rights and transparency practices to ensure lawful, fair and clear handling of personal data.

GDPR-style protections will be applied by Taxonelaw only where we determine, based on the nature of services and user location, that European data protection rules are applicable. This does not replace local Thai law obligations but complements them for covered data subjects.

• Lawful basis: we document and rely on lawful bases such as contract performance, legal compliance, legitimate interests, and consent where required.
• Transparency: we provide clear information on processing purposes, categories of data, recipients, and retention periods to affected individuals.
• Data minimization: we limit collection and retention to what is necessary for the stated purposes and apply retention schedules.
• Security measures: we implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or loss.

If you believe Taxonelaw has not addressed a privacy concern adequately and you are subject to GDPR protections, you may lodge a complaint with your local supervisory authority. We also encourage you to contact our Data Protection Contact first so we can contribute and respond promptly.

To exercise any data subject rights, contact Taxonelaw with a clear description of your request and proof of identity where necessary. We will assess the request and, if valid, take action in accordance with legal requirements and internal procedures.

[email protected]

Taxonelaw aims to acknowledge rights requests within 5 business days and to provide a substantive response within 30 calendar days where feasible. Complex requests may require additional time, and you will be informed if an extension is needed.

We only send marketing communications where you have consented or where permitted by applicable law. Marketing messages will include a clear description of offers, services, or updates relevant to entrepreneurs and small businesses.

Every marketing message from Taxonelaw contains an unsubscribe link. You can also stop marketing communications by contacting us directly; allow up to 10 business days for processing.

Taxonelaw's services are intended for business users and adults. We do not knowingly collect personal data from children under applicable age limits. If we become aware of inadvertent collection, we will take steps to delete the information promptly.

Our site may include links to third-party sites and services. Taxonelaw is not responsible for the privacy practices of external sites; review their privacy notices before providing personal information.

We may update this privacy information to reflect changes in our practices or legal requirements. Material changes will be posted on the site with an updated effective date so you can review them easily.