General Privacy Statement
Agenttopright collects and processes personal data to deliver legal services to real estate professionals and to operate our website. We limit data collection to information necessary for consultations, contract preparation, billing, and service improvement. We take administrative and technical steps to protect personal data and to ensure it is handled in accordance with applicable laws and best practices for professional service providers.
Definitions
This section explains the key terms used in the policy so you can better understand what types of data we process and for which purposes.
Data We Collect
We collect data in three main ways: information you provide directly, data collected automatically through website use, and information obtained from third-party partners when necessary to deliver services.
Data You Provide Directly
When you contact us or register for services, we may collect the following categories of personal information to evaluate and deliver legal support.
- Contact details: name, email address, phone number, agency affiliation
- Property details: address, ownership information, listing information relevant to legal work
- Identification and business information required for legal intake and billing
- Communications: messages, instructions, documents you upload for review
- Payment details provided to authorized processors for billing and invoices
- Feedback and preferences related to our services
Data Collected Automatically
When you use our website, we automatically collect technical data to maintain site functionality, analyze trends, and improve user experience.
- Device and browser information
- IP address and approximate location inferred from IP
- Pages visited, clicks, session duration and navigation paths
- Referrer URL and search queries that led you to our site
- Analytics and performance metrics from third-party tools
- Cookies and similar tracking identifiers
Data from Third Parties
We may receive data from partners or service providers to complete transactions or verify information necessary for legal services.
- Payment processors and billing partners for invoicing
- Public registers or property databases when performing due diligence
- Professional partners and experts engaged to support a matter
How We Use Personal Data
We use personal data to perform core services and to improve the client experience. Our purposes include:
- Providing legal advice, preparing and reviewing contracts, and supporting real estate transactions
- Communicating with clients about case status, deadlines, and requests for information
- Processing payments, invoicing, and maintaining billing records
- Complying with legal and regulatory obligations, including identification and record-keeping requirements
- Improving our website and services through analytics and feedback
- Sending service-related notifications and administrative messages
- Marketing communications where permitted and with an option to opt out
- Sharing with partners only when necessary to provide a requested service
Legal Basis for Processing
We rely on appropriate legal bases for processing personal data depending on the activity and applicable law.
- Performance of a contract or steps at the request of the client to provide legal services
- Compliance with a legal obligation, including business and tax record-keeping
- Legitimate interests for fraud prevention, security, and service improvement when balanced with data subject rights
- Consent for marketing communications, where consent is obtained
Data Subject Rights and International Standards
Where European data protection standards apply, we uphold key rights and follow recognized practices to manage personal data responsibly.
- Right of access: request a copy of personal data we hold
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of data where retention is not required by law
- Right to restriction of processing in certain circumstances
- Right to data portability where applicable
- Right to object to processing based on legitimate interests or direct marketing
Sharing Personal Data
We share personal data only as needed to deliver services, comply with laws, and operate the business. Third-party recipients are required to protect personal data and process it only for permitted purposes.
- Service providers who support billing, hosting, and analytics
- Professional advisors and experts engaged to support a specific matter
- Authorities where disclosure is required by law or necessary to respond to a legal process
- Payment processors and banks to complete transactions
- Third parties involved in a transaction at your instruction (e.g., counterparties, other agents)
- Acquirers or successors in the event of a business sale or reorganization
International Transfers
Personal data may be transferred to service providers located outside Thailand. We take steps to ensure adequate protections are in place, such as contractual safeguards and careful vendor selection.
Where transfers occur, we rely on appropriate safeguards including data processing agreements, standard contractual clauses where applicable, and vendor due diligence.
Data Retention
We retain personal data only as long as needed to provide our services and to satisfy legal, regulatory, or accounting requirements.
Account and client file information is retained for the duration of the professional relationship and for a period thereafter required for record-keeping, typically up to 7 years for business records unless a different retention period is required by law.
Communications and documents platform for a matter are retained for the duration of the matter and as necessary to protect legal interests and comply with obligations.
System logs and analytics data are retained for a limited period to monitor performance and security and are aggregated or anonymized where possible.
When data is no longer required we securely delete or anonymize it in line with our retention schedules and technical capabilities.
Security Measures
Agenttopright maintains administrative, physical, and technical safeguards to protect personal data. Access is limited to authorized personnel, and we apply encryption, secure storage, and review procedures to reduce the risk of unauthorized access.
- Access controls and role-based permissions for staff
- Encryption for data in transit and where practical at rest
- Regular security reviews, vendor assessments, and incident response planning
Your Rights
You may exercise rights regarding your personal data by contacting us. We aim to respond to valid requests within a reasonable time frame and in accordance with applicable law.
- Request access to personal data we hold about you
- Request correction or deletion of inaccurate or unnecessary data
- Object to processing based on legitimate interests or request restriction of processing
- Withdraw consent for specific processing operations where consent was the legal basis
- Request restriction of processing when you believe data is inaccurate or processing is no longer necessary for the purposes collected.
- Object to direct marketing uses of your contact details and to profiling for marketing purposes.
- Withdraw consent at any time for processing activities that rely on consent as the legal basis, without affecting prior processing.
- File a complaint with local supervisory authorities in Thailand if you believe your personal data rights have been infringed.
How to exercise your privacy rights
To submit a request to access, correct, delete, or restrict your personal data, contact Agenttopright via the contact details below. Provide your full name, business ID if applicable, the type of request, and any supporting documents to help us verify your identity. We will respond in accordance with applicable Thai data protection laws and internal procedures.
We aim to acknowledge receipt of rights requests within 7 business days and to provide a substantive response within 30 calendar days. Complex requests may require additional time; we will notify you if an extension is necessary.
Marketing communications
Agenttopright may use your contact details to send targeted information about legal services for realtors, industry updates, and offers relevant to property professionals. Marketing communications are designed to be practical, focused on reducing legal risk and improving deal efficiency for real estate agents.
You can opt out of marketing messages at any time by following the unsubscribe link in emails or by contacting us directly. Opting out will not affect transactional messages related to services you have engaged.
Children's privacy
Our services are intended for professionals and adults. We do not knowingly collect personal data from children under 18. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete it promptly.
Third-party links
Our website and communications may contain links to third-party sites and services. Agenttopright is not responsible for the privacy practices or content of those sites. Review third-party privacy policies before sharing personal information with them.
Changes to this privacy notice
We may update this privacy notice to reflect changes in services, legal requirements, or best practices. Material changes will be published on agenttopright.pro with the effective date. Continued use of our services after updates indicates acceptance of the revised terms.