Privacy Policy — evomindupity

Key Definitions

This section explains terminology used throughout the policy. Defined terms help clarify the scope of processing activities, the categories of personal data we handle and the roles we perform as data controller or processor in relation to client matters.

Personal data means any information relating to an identified or identifiable individual. For clients of evomindupity, this can include name, contact details, identification numbers, family information, health-related information when provided for legal advice, business information relevant to asset management or claims, and any other details supplied for the provision of legal services.
Processing refers to any operation performed on personal data, whether automated or manual, including collection, recording, organization, structuring, storage, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction. Processing activities described below are carried out for the legitimate provision of legal services and administrative needs.
User, client or data subject refers to a person who receives services from evomindupity, or whose personal information is provided to evomindupity as part of a legal engagement. This can include pensioners, family members, legal representatives and authorized contacts.
Service refers to the legal information, document drafting, representation in administrative matters, estate planning and related support services offered by evomindupity to pensioners and older adults in Thailand.
Cookies are small files placed on a device by a website to store information about a visitor’s activity. We use cookies and similar technologies on evomindupity.digital to enable basic site functionality, analyze usage patterns and improve user experience.

Data We Collect

We collect data that is necessary to deliver legal services effectively, to comply with legal obligations and to maintain records for professional and administrative purposes. Data collection methods include information provided directly by clients, automated collection when using our website, and information received from third parties where permitted.

Data You Provide Directly

When you contact us, register for services or engage in consultation, we may collect the following categories of information that you supply voluntarily:

Identity and contact details: full name, postal address, telephone number, email address and emergency contact information.
Identification and legal documents: national ID, passport details, residency documentation, power of attorney forms, wills and related legal documents.
Business information relevant to legal matters: bank details, pension statements, asset descriptions and related supporting documents when required for advice or administration.
Health and care information: limited health details or medical instructions provided to support the drafting of health directives or to coordinate care-related legal actions.
Case-related information: descriptions of the legal issue, correspondence, contracts, administrative filings and other records necessary to provide legal advice or representation.
Communications and preferences: records of communications with evomindupity, language preferences and service delivery preferences.

Data Collected Automatically

When you visit our website or interact with digital services, certain technical information may be collected automatically to support site functionality, security and analytics.

Device and connection information: IP address, browser type, operating system and device identifiers.
Usage data: pages visited, time spent on pages, referral sources, and error logs.
Cookies and local storage data used to enable session management and site preferences.
Analytics identifiers used to understand site performance and user interaction patterns.
Security-related data such as failed login attempts and other events used to detect misuse.
Geolocation data derived from IP address where necessary for service localization or security.

Data from Third Parties

In some cases we may receive information from third parties relevant to a client matter or for verification purposes. We limit such collection to what is necessary and permitted by law.

Referrers and family members who provide documents or case history with explicit consent.
Publicly available sources and official registries used for legal verification purposes.
Service providers engaged to perform background checks, translation, notarization or secure storage on our behalf where required for case handling.

Purposes of Processing

We process personal data for clearly defined and limited purposes. The table below summarizes the principal purposes and the types of data involved.

To provide legal advice, draft documents and represent clients in permitted matters — using identity, case-related documents and relevant business or health information.
To communicate with clients about appointments, case progress and administrative matters — using contact and communication records.
To comply with applicable laws and regulatory requirements, such as anti-funds laundering checks or court filing obligations.
To maintain internal records for professional standards, billing and dispute resolution — using case files and billing information.
To improve our services and website performance through anonymized analytics and feedback collected with consent where applicable.
To manage security and fraud prevention, including detection of unauthorized access and abuse.
To facilitate referrals and coordination with other professionals (e.g., medical, business or translation services) with client consent.
To respond to legal requests from authorities when required by law.

Legal Basis for Processing

Under applicable data protection principles, we rely on a lawful basis for each processing activity. The lawful bases we commonly rely on are described below.

Performance of a contract or steps prior to entering a contract: processing necessary to provide legal services requested by the client.
Legal obligation: processing required to comply with statutory or regulatory duties in Thailand.
Legitimate interests: processing for business administration, fraud prevention and service improvement, balanced against individuals' privacy interests.
Consent: where we collect special categories of data (for example health information) or use cookies beyond strictly necessary functionality, we will request express consent where required.

Rights Under Data Protection Law

Although evomindupity operates in Thailand, we recognize international standards for data protection. Where individuals have rights under applicable law, we provide mechanisms to exercise those rights. Below is a non-exhaustive list of common rights provided under modern data protection frameworks.

Right of access: the right to request a copy of personal data we hold about you.
Right to rectification: the right to request correction of inaccurate or incomplete personal data.
Right to erasure: the right to request deletion of personal data where there is no legal basis to retain it.
Right to restriction of processing: the right to request limitation of how we process certain data.
Right to data portability: where applicable, the right to receive personal data in a structured, commonly used format.
Right to object: the right to object to processing based on legitimate interests or direct marketing where applicable.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website to enable functionality, store preferences and gather usage data. Some cookies are essential for the site to work; others support analytics and optional features.

Types of cookies include session cookies that expire when you close your browser, persistent cookies that remain for a set period, functional cookies for preferences, and analytics cookies that help us understand site use.

We categorize cookies as necessary, functional, and analytics. Necessary cookies enable core functionality. Functional cookies remember choices. Analytics cookies help improve the site. We do not use advertising cookies for targeted profiling.

Most browsers allow users to manage cookies through settings to block or delete cookies. Opting out of certain cookies may affect website functionality. For non-essential cookies used for analytics we provide mechanisms to opt out on the website.

Cookie Settings and Details

Data Sharing and Disclosure

We only share personal data when necessary for the service, required by law, or with the explicit consent of the client. Third-party recipients are limited and contractually obliged to protect data.

Service providers engaged to perform tasks on our behalf (secure storage, translation, document filing).
Government or judicial authorities when compelled to provide information by law or court order.
Other professionals (e.g., medical practitioners, accountants) with the client’s authorization for case-related coordination.
Successors in case of corporate reorganization or transfer, subject to contractual safeguards to protect personal data.
Anonymized or aggregated information that does not identify individuals may be shared for research or service improvement.
Third parties for fraud prevention or security where necessary to protect legal rights and prevent abuse.

International Transfers of Data

Personal data may be transferred to service providers or partners located outside Thailand when necessary for service delivery. In such cases, we implement appropriate safeguards to ensure an adequate level of protection consistent with applicable law.

Safeguards may include standard contractual clauses, data processing agreements that require equivalent protection, and verifying that recipients maintain appropriate security measures.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described or to meet legal, regulatory or professional recordkeeping obligations.

Client files and identity documentation are typically retained for the period required by professional rules and local law, which can include multi-year retention for legal records.

Communication records related to a case are retained for the duration of the matter and for the subsequent period required for recordkeeping, dispute resolution and compliance purposes.

Technical logs and analytics data are retained in aggregated or pseudonymized form for operational monitoring and security, typically for limited periods unless otherwise required.

When retention periods expire or when data is no longer necessary, we securely delete or anonymize personal data, unless preservation is required by law or to protect legal interests.

Security Measures

We adopt administrative, technical and physical measures proportionate to the sensitivity of the data and the risks involved. Measures are reviewed periodically to address new threats and to maintain reasonable safeguards appropriate to the context of legal services for older adults.

Access controls and role-based permissions to limit data access to authorized personnel only.
Encryption of sensitive data in transit and at rest where practicable, and secure backups stored with access controls.
Regular staff training on data protection, confidential handling of client files and incident response procedures.

How to Exercise Your Rights

If you are a client or data subject whose personal data we process, you have rights regarding that data. Requests should be submitted in writing and we will respond within reasonable timeframes, subject to legal exceptions.

Request access to personal data and obtain a copy of the information we hold.
Request correction of inaccurate or incomplete data.
Request deletion or restriction of processing where there is no overriding legal obligation to retain data.
Object to processing based on legitimate interests, and withdraw consent where processing is based on consent.
Request transfer of your data in a structured, commonly used format where applicable.
Right to withdraw consent for processing personal data where processing is based on consent, subject to legal and contractual limitations.
Right to lodge a complaint with a supervisory authority in Thailand regarding data handling practices and compliance with applicable data protection laws.
Right to be informed of automated decision-making processes that materially affect you, and to request human review in appropriate cases.

How to exercise your privacy rights

To submit a request to access, correct, port, restrict, or delete your personal data, contact our data protection coordinator using the contact details below. Please include your full name, a description of the request, and a copy of an identity document for verification. We may ask for additional information to confirm your identity and process your request in a secure manner.

[email protected]

We aim to respond to verified requests within 30 days. If additional time is required due to the complexity or volume of requests, we will inform you and provide an estimated response timeframe.

Marketing and communications

We may use your contact information to send information about legal services, updates, and resources relevant to retirees if you have consented or it is otherwise permitted by law. Marketing communications will include a clear option to opt out at any time. We limit promotional material to content related to legal rights, benefits, estate planning, and dispute resolution for retirees.

To stop receiving marketing communications, use the unsubscribe link in any message or contact [email protected] with your request. We will process opt-out requests promptly and update our records to reflect your preferences.

Children and vulnerable individuals

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without proper authorization, we will take steps to delete that information as required by applicable law.

Third-party links

Our website may link to third-party sites and services for additional information and resources. evomindupity is not responsible for the privacy practices or content of those external sites. We recommend reviewing the privacy policies of any third party before providing personal information.

Changes to this privacy policy

We review our privacy practices periodically to reflect changes in law, technology, and our services. Material changes to this policy will be published on our website with an updated effective date. Minor clarifications may be applied without prior notice when they do not affect your rights.

Privacy Policy Overview