Key Definitions
To make this policy clear, we define common terms used throughout, including personal data, processing, user, service, and cookies. These definitions match common data privacy frameworks to help you understand what we mean when we refer to data handling.
Personal data means any information that identifies or can reasonably be used to identify an individual, such as name, contact details, identification numbers, dates of birth, or other demographic and case-related data provided to evoperson.
Processing refers to any operation performed on personal data, such as collection, recording, organization, storage, use, disclosure, erasure and destruction performed by or for evoperson for the provision of legal services.
User refers to any visitor of the evoperson website, clients seeking legal services for retirees, and their authorized representatives or caregivers who interact with our services.
Service describes the legal consultations, document preparation, client support, and related online content that evoperson provides to retirees and their representatives in Thailand.
Cookies are small text files stored on your device that enable basic site functions, remember preferences, and provide analytics about site usage. evoperson uses cookies to improve navigation and service delivery.
Data We Collect
We collect data necessary to deliver legal services, respond to inquiries, manage accounts, and comply with legal obligations. Collection is limited to what is relevant and proportionate for those purposes.
Third Parties That May Receive Data
We may share data with trusted third parties who support our services, under contractual safeguards and only as necessary for service delivery or legal compliance.
- Legal partners and external counsel assisting with case-specific work under confidentiality terms.
- Payment processors and invoicing services for billing and payment reconciliation when needed.
- Analytics and hosting providers that help operate the website and monitor performance securely.
Data You Provide Directly
When you contact evoperson or engage our services, you may provide personal and case-related information necessary to deliver assistance.
- Contact details: name, email address, mailing address and phone number for client communication.
- Identification details: national ID, passport number or other identity documents when required to perform legal services.
- Case information: descriptions of legal issues, medical information relevant to representation, and documents you upload.
- Payment information: billing details and transaction records processed by our payment partners.
- Preferences and consent choices for communications and marketing materials.
- Representative information: names and contact details of persons authorized to act on a client’s behalf.
Data Collected Automatically
Some data is collected automatically when you visit our website to improve functionality and security. This data is not typically used to identify an individual by itself.
- IP address and connection information to support site operation and limit fraudulent activity.
- Device and browser details such as operating system, browser version, and screen size for compatibility improvements.
- Usage data including pages visited, time on site, and referral sources for analytics and service improvement.
- Cookie identifiers and similar local storage information as described in our cookie policy.
- Error logs and performance metrics used to diagnose technical issues and enhance reliability.
- Geolocation data derived from IP addresses to help route inquiries to appropriate regional resources.
Purposes of Processing
We process personal data only for lawful, specified purposes necessary to provide legal services, manage client relationships, comply with obligations and improve our offering to retirees.
- To provide legal advice, prepare documents, and represent clients in matters relevant to retirement, pensions and elder law.
- To communicate with clients and their authorised representatives about case status, appointments and service updates.
- To process payments, invoices and fulfill business recordkeeping obligations.
- To perform identity verification and due diligence required by law or professional standards.
- To analyze site usage and service performance for ongoing improvements to our legal support for retirees.
- To manage security, detect abuse, and prevent fraudulent or malicious activity affecting clients.
- To meet legal obligations in Thailand and respond to lawful requests from courts or regulators.
- To send optional service-related announcements, newsletters and invitations when you have consented to receive them.
Legal Bases for Processing
Where applicable, evoperson relies on lawful bases such as contractual necessity, compliance with legal obligations, legitimate interests and consent for different processing activities.
- Contractual necessity: processing needed to perform legal services you requested.
- Legal obligation: processing required to comply with Thai laws, court orders, or regulatory duties.
- Legitimate interests: for security, fraud prevention, and improving our services when such processing does not override your rights.
- Consent: when we rely on your explicit agreement for marketing communications or optional data processing.
Rights Under GDPR and Similar Laws
Depending on your jurisdiction and applicable law, you may have rights to access, correct, delete or restrict processing of your personal data. We explain common rights below and how to exercise them.
- Right of access: request a copy of personal data we hold about you.
- Right of rectification: ask us to correct inaccurate or incomplete information.
- Right to erasure: request deletion of personal data where legal grounds allow.
- Right to restrict processing: request limitations on how we use your data in certain situations.
- Right to data portability: request your data in a structured, commonly used format when applicable.
- Right to object: object to processing based on legitimate interests or direct marketing where applicable.
Cookies and Similar Technologies
evoperson uses cookies to provide essential site functions, remember your preferences, and analyze usage. You can manage cookie preferences through your browser or our cookie controls.
We use session cookies, persistent cookies, and local storage to enable authentication, security, analytics and personalization features.
Categories include strictly necessary cookies for site operation, performance and analytics cookies, and optional advertising or targeting cookies if you choose to enable them.
You may configure or block cookies via your browser settings or the cookie banner on our site. Blocking certain cookies may limit functionality and user experience.
Full Cookie Policy
Sharing and Disclosure of Personal Data
We share personal data only as necessary to provide services, comply with the law, or with your consent. Third-party recipients are subject to confidentiality and contractual limitations.
- Service providers and partners acting on our behalf under written agreements limiting their use of data.
- External legal counsel and experts engaged to assist with specific client matters.
- Government authorities, courts or regulators when disclosure is legally required.
- Payment and billing processors to facilitate transactions and accounting.
- Acquirers or advisors in connection with business transfers, subject to confidentiality safeguards.
- Analytics and technical providers to maintain and improve website performance and security.
International Data Transfers
Personal data may be transferred or accessed outside Thailand when required for service delivery. We take steps to ensure such transfers include appropriate protections, and we assess risks when cross-border access is necessary.
We use contractual protections, data processing agreements and where appropriate model clauses or equivalent safeguards to help protect personal data transferred internationally.
Security of Your Data
evoperson implements administrative, technical and physical measures designed to protect personal data from unauthorized access, loss or misuse. Security controls are reviewed periodically and adjusted to reflect evolving risks.
- Access controls and role-based permissions for staff handling personal data.
- Encryption in transit for sensitive communications and secure storage practices for confidential files.
- Regular backups, monitoring and incident response procedures to address potential security events.
Data Retention
We retain personal data only as long as necessary for the purposes described, or to meet legal, regulatory, and professional obligations. Retention periods vary by data type and the nature of the client relationship.
Client account records and case files are retained for periods consistent with legal and professional requirements or until you request deletion and retention is no longer necessary.
Communications and messages are retained to support case continuity and may be deleted upon request subject to legal constraints.
System logs and analytics data are retained for a limited period to support security, performance and troubleshooting needs.
When retention periods expire or you request deletion, we will remove or anonymize data unless retention is required by law or judicial process.
How to Exercise Your Rights
To exercise rights such as access, correction or deletion, contact us with details about your request and a method to verify your identity. We aim to respond promptly and within any legally required timeframe.
- Contact evoperson at the address or email below with your request and identity verification details; we will review and respond in accordance with applicable privacy laws.
- Request correction of inaccurate personal data we hold about you and submit supporting documents to update records promptly.
- Request deletion of personal data that is no longer necessary for the purposes collected, subject to legal and contractual obligations.
- Restrict processing when accuracy is contested or processing is unlawful but you oppose deletion and request limited use instead.
- Receive a copy of personal data in a commonly used, machine-readable format where applicable and request transmission to another controller.
- Object to processing based on legitimate interests or direct marketing; we will review objections and suspend processing when required.
- Withdraw consent at any time for processing activities that rely on your consent, without affecting processing already carried out lawfully.
- File a complaint with a supervisory authority in Thailand if you consider our handling of your personal data does not comply with applicable privacy laws.
How to exercise your privacy rights
To exercise any privacy right, contact our Data Protection Coordinator with a clear request and a copy of a valid ID. Include the specific right you are invoking, the personal data involved, and any documents that support your request. We verify requests to protect your privacy and may ask for additional information to confirm your identity before taking action.
[email protected]
We aim to respond to verified requests within 30 days. Complex requests may require additional time; if so, we will notify you and provide an estimated completion timeframe.
Marketing communications
We may send occasional information about new services, helpful legal tips for retirees, and updates from evoperson. Marketing communications are based on your consent or our legitimate interests to inform you about related services that may help seniors in Thailand manage legal matters more easily.
You can opt out of marketing at any time by using the unsubscribe link in our emails, updating your preferences in your account, or contacting our support team. Opting out will not affect transactional communications related to services you have requested.
Children and vulnerable persons
evoperson primarily provides services to adults. We do not knowingly collect personal data from children under 18 years for our legal services. If you believe we have collected data about a child without appropriate consent, contact us and we will take steps to remove the information where required by law.
Links to third-party sites
Our site may link to other websites maintained by partners and service providers. Those sites have separate privacy policies and evoperson is not responsible for their content or privacy practices. Review the privacy notices on linked sites before providing personal data.
Changes to this privacy policy
We periodically review and may update this privacy policy to reflect regulatory changes, new services, or improvements in our data practices. Material changes will be posted on evoperson.info with an updated effective date so you can see when key modifications were made.