Privacy Policy
Privacy notice for QuickVisa website users and consulting clients.
1. Scope
This notice explains how QuickVisa processes personal data when a person uses this website, contacts the consultancy, requests a consultation or submits information for a visa or immigration-related case.
2. Data controller
The production legal entity name, registered address, privacy contact email and telephone number must be inserted here before launch.
3. Data we may process
Depending on the service, this may include identity and contact data, nationality, travel and immigration information, passport/visa details, address information, employment/business information, financial evidence and documents voluntarily supplied for case assessment. The website should collect only information necessary for the stated purpose.
4. Purposes
Data may be used to respond to enquiries, assess a requested consulting service, prepare or review documents, administer the client relationship, maintain security, comply with legal obligations and establish or defend legal claims where applicable.
5. Legal basis
The applicable legal basis depends on the processing activity. It may include steps requested before entering into a contract, performance of a contract, compliance with law, legitimate interests, or consent where consent is the appropriate basis. Consent should not be used as a blanket basis for every activity.
6. Sensitive data
Visa files can contain information that may require heightened protection. Such data should be requested only when necessary for the specific case and handled under an appropriate legal basis and access controls.
7. Recipients
Personal data may be disclosed only where necessary to service providers, professional advisers, or competent authorities in connection with the client's requested process. The production notice must identify relevant recipient categories actually used by QuickVisa.
8. International transfers
If data is stored or accessed outside Thailand, the production notice must describe the applicable transfer mechanism and safeguards.
9. Retention
QuickVisa should retain personal data only for the period necessary for the relevant purpose, legal obligations and legitimate record-keeping requirements. A production retention schedule must be adopted for enquiry records, client files, accounting records and consent logs.
10. Data-subject rights
Subject to the PDPA and applicable exceptions, individuals may have rights including access, correction, deletion, restriction or objection, portability where applicable, withdrawal of consent, and complaint to the competent authority.
11. Security
QuickVisa should use role-based access, secure transmission and storage, access logging, backups, staff confidentiality controls and procedures for handling suspected personal-data breaches.
12. Contact and complaints
The production privacy contact and, if legally required, DPO details must be inserted here. The Thai Personal Data Protection Committee is the competent supervisory authority.