Privacy policy overview
This privacy policy explains how viflour collects, uses and shares personal data when providing legal information and services related to seniors. Our office address is 60, Thanon Pracha Samoson, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand. For appointments or enquiries call +66910527953 or reference Business ID 5512680938590. The policy describes categories of data processed, purposes, legal bases and rights available to individuals.
Key definitions
This section provides plain-language definitions of terms used in the policy to help you understand what we mean by personal data, processing and other concepts.
What data we collect
We collect data that is necessary to provide legal services, to meet regulatory obligations and to manage administration. The specific items collected depend on the service requested.
Data you provide directly
When you contact viflour or use our services we may collect the following categories of information:
- Identification details such as full name, date of birth and national ID or passport number when required for legal filings
- Contact details including phone number, email address and postal address
- Case-related information such as business records, property information, pension details and benefit documentation
- Medical or care-related information if it is necessary for advance directives, guardianship or similar matters and you consent to provide it
- Documents and copies of legal papers, powers of attorney, wills and contracts submitted for review or filing
- Payment and billing information needed to process invoices and receipts
- Communications and consent records, including notes from consultations and agreements to proceed
- Information provided by a family member or authorized representative when acting with appropriate authority
Data collected automatically
When you visit the viflour website or use online services, we may automatically collect certain technical and usage data to operate and improve the service.
- Technical device and browser information such as browser type, operating system and device model
- IP address and approximate location derived from the IP address
- Usage data including pages visited, time spent on pages and interaction patterns
- Analytics and diagnostic data to monitor and improve website performance
- Cookie identifiers and similar tracking data if cookies are enabled
- Referrer information that shows how you arrived at the site
- Error and crash reports if a technical failure occurs
- Session identifiers used to maintain secure connections during a visit
Data received from third parties
In some cases we receive relevant personal data from third parties to perform services or to comply with legal obligations. We handle such data in accordance with this policy.
- Information from government bodies or courts where required for a legal matter
- Data provided by hospitals or care providers when medical information is necessary and shared with consent
- Details received from family members or legal representatives acting with authority
- Data from payment processors for billing and transaction verification
Why we process personal data
We process personal data only for specific, explicit and legitimate purposes related to providing legal services, complying with legal obligations and maintaining administrative operations.
- To provide legal advice, draft documents and represent clients in legal or administrative proceedings
- To verify identity for authentication and to meet anti-fraud and anti-funds laundering requirements
- To manage appointments, communications and case administration
- To process payments, invoices and business records related to services
- To respond to regulatory or court-ordered requests from public authorities
- To maintain security, detect abuse and protect the rights and safety of clients and staff
- To perform internal record-keeping, quality control and professional training
- To carry out anonymized research and service improvement activities where individual persons are not identifiable
- To address complaints and resolve disputes related to the services provided
Legal bases for processing
Processing is based on appropriate legal grounds depending on the data and purpose. We identify the relevant legal basis for each processing activity as required by applicable law.
- Performance of a contract: processing necessary to provide the legal services requested by the client
- Legal obligation: processing required to comply with laws, court orders or regulatory duties
- Consent: where you have given clear consent to a specific processing activity, such as sharing medical information for a case
- Legitimate interests: where processing is necessary for administrative functions, security or fraud prevention and does not override individual rights
- Protection of vital interests: in circumstances where processing is necessary to protect someone's life or health
GDPR and data subject rights
If EU data protection rules apply to your personal data, you may have rights similar to those described here. Below are common rights individuals can exercise regarding personal data held by viflour.
- Right of access: you can request confirmation whether we process your personal data and obtain a copy of that data
- Right to rectification: you may request correction of inaccurate or incomplete personal data
- Right to erasure: in certain situations you may request deletion of personal data we hold about you
- Right to restriction of processing: you may request limited use of your data in defined circumstances
- Right to data portability: when applicable, you can request a copy of certain personal data in a structured, machine-readable format
- Right to object: you may object to processing based on legitimate interests or direct marketing
- Right to lodge a complaint with a supervisory authority where you believe your rights are not respected
Cookies and similar technologies
viflour uses cookies and similar technologies to ensure the website functions correctly and to understand usage patterns. Cookies do not usually identify an individual on their own.
We use session cookies for basic site operation, persistent cookies for preferences and analytics cookies to measure site performance. Third-party cookies may be set by analytics providers or social features.
Categories include strictly necessary cookies, performance and analytics cookies, and functional cookies that remember preferences. You can disable non-essential cookies via your browser settings.
You can manage cookie preferences through your browser or device settings. Disabling some cookies may affect site functionality. For specific details, contact our data protection contact.
Cookie policy details
How we share personal data
We may share personal data with third parties only when necessary for the purposes described in this policy and under appropriate safeguards.
- Professional advisors such as external lawyers, accountants or translators engaged to assist with a case
- Service providers including hosting, IT support and document storage providers acting as processors
- Courts, tribunals and government agencies when required by law or to pursue a legal matter
- Payment processors and banks to enable secure billing and transaction processing
- Authorized family members or representatives when you have given consent or legal authority
- Regulatory authorities or law enforcement in response to lawful requests
- Third parties involved in dispute resolution or mediation where sharing is necessary to resolve a case
International transfers
Personal data may be transferred to countries outside your jurisdiction, including to cloud service providers and professional partners. When transfers occur, viflour ensures appropriate safeguards are in place such as contractual clauses, data processing agreements or other legal mechanisms to protect your data. For details on specific transfers and safeguards, contact our data protection representative.
When personal data is transferred outside Thailand, viflour applies contractual and technical safeguards to protect that data. Transfers are limited to service providers that follow recognized data protection standards and have been assessed for appropriate security practices. Where required by law, viflour uses standard contractual clauses, data processing agreements, or other lawful mechanisms to document the responsibilities of third-party recipients. Recipients are required to process data only for the purposes specified by viflour and to apply safeguards consistent with local legal requirements and with the protections described in this policy.
Data retention
viflour retains personal information only as long as necessary for the purposes described in this policy and to comply with legal, tax, or regulatory obligations in Thailand. Retention periods vary by data type and the context of collection.
Account registration and profile information for active users is normally retained for the duration of the account and for up to six years after account closure when necessary for record-keeping or tax purposes unless a longer period is required by applicable law.
Communications and messages platform with viflour support or legal advisors related to case handling are retained for the period necessary to manage the legal matter and for a maximum of six years for administrative and compliance purposes.
Access logs, security logs, and audit trails are retained for a limited period to support system maintenance, security incident response, and fraud prevention. Typical retention for logs is between 12 and 36 months, depending on the nature of the log and operational needs.
When personal data is no longer required, viflour deletes or anonymizes it in a secure manner. Certain operational or legal constraints may prevent immediate deletion; in such cases, data is archived and access is restricted until deletion is permitted.
Security of personal data
viflour applies administrative, technical, and physical measures designed to reduce the risk of unauthorized access, disclosure, or loss of personal data. Measures are regularly reviewed and adjusted to reflect changes in technology and legal obligations while keeping the needs of pensioner clients and legal confidentiality in view.
- Access controls limiting system access to authorized staff and external service providers on a need-to-know basis.
- Encryption of sensitive data in transit using TLS and encryption at rest for selected data stores.
- Regular vulnerability scanning, security assessments, and periodic staff training on data protection and confidentiality.
- Backups and disaster recovery measures to preserve client information and case records while maintaining confidentiality.
Your rights regarding personal data
Individuals have rights in relation to their personal data. The scope and application of these rights depend on local law. viflour describes common rights below and provides a process to submit requests.
- Access: Request a copy of personal data held by viflour concerning you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of personal data where retention is no longer necessary and no legal reason to retain it exists.
- Restriction: Request restriction of processing in certain circumstances, such as during a dispute over accuracy.
- Portability: Request a structured, commonly used, machine-readable copy of personal data when applicable.
- Objection: Object to processing based on legitimate interests or direct marketing in some cases.
- Withdraw consent: Where processing relies on consent, withdraw consent for future processing.
- Complain: Lodge a complaint with an appropriate supervisory authority in Thailand if you consider processing unlawful.
- Third-party disclosure information: Request details about recipients and categories of recipients to whom data has been disclosed.
How to make a rights request
To submit a request to access, correct, delete, or otherwise exercise your rights, contact viflour using the contact details below. Provide sufficient information to verify your identity and to allow viflour to locate the relevant records. Requests may be handled by email, postal mail, or through an authorized representative. Some requests may be subject to limitations under applicable law.
viflour will acknowledge receipt of a valid request within 30 days and aim to respond substantively within 60 days. Complex requests or those requiring verification may take longer; if so, viflour will inform you of the reason and the expected timetable.
Marketing and communications
viflour may use contact details to send information about relevant legal services for pensioners, updates to policies, and other administrative notices. Marketing communications will be clearly identified and sent only where lawful and appropriate.
You may opt out of marketing emails or other promotional communications at any time by following the unsubscribe link in the message or by contacting viflour using the contact details provided below.
Children's privacy
viflour's services are intended for adults and pensioners. viflour does not knowingly collect personal data from children under the legal age of majority for legal services in Thailand. If personal data of a minor is submitted inadvertently, contact viflour to request removal.
Links to third-party sites
viflour may provide links to external websites for additional information or resources. These third-party sites have their own privacy practices. viflour is not responsible for the content or practices of external sites and recommends reviewing their privacy notices before providing personal data.
Changes to this privacy policy
This privacy policy may be updated to reflect changes in legal requirements, services, or operational practices. Material changes will be communicated on the viflour website and, where appropriate, through direct notification to affected users.
Contact information for privacy matters
For questions about this privacy policy or to exercise your privacy rights, contact: viflour, 60, Thanon Pracha Samoson, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand. Business ID: 5512680938590. Phone: +66910527953. Email: [email protected].
- +66910527953
- [email protected]
- 60, Thanon Pracha Samoson, Nai Mueang Sub District, Amphoe Mueang Khon Kaen District, Khon Kaen Province 40000, Thailand