Privacy Policy

Definitions

This section provides clear definitions of terms used throughout the policy to help clients, partners and site visitors understand how we treat personal data in the context of legal services for real estate professionals.

Personal data means any information relating to an identified or identifiable natural person, for example name, contact details, identification numbers, business information and property transaction details that can be associated with an individual.

Processing means any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, erasure and destruction.

User refers to any visitor to axailab.pro, prospective or current client, partner, or third party whose personal data is processed in connection with the delivery of legal services for real estate professionals in Thailand.

Service refers to professional legal advice, contract drafting and review, due diligence, compliance support and other law-related services provided by axailab to real estate agents, consultant and related businesses.

Cookies are small text files stored on a user's device by a website to improve functionality, remember preferences, analyze site usage and support security and fraud prevention processes.

Purposes of Processing

We process personal data for specific, explicit and legitimate purposes connected to provision of legal services, compliance with legal obligations, risk management and communication with clients and stakeholders.

• Provision of legal services: to perform contract review, draft agreements, conduct due diligence and provide legal advice tailored to real estate professionals.
• Client onboarding and verification: to carry out identity checks, anti-funds laundering and know-your-client procedures required by law and professional standards.
• Case management and record keeping: to maintain accurate case files, correspondence and billing records needed for effective legal representation.
• Communication and support: to respond to inquiries, schedule consultations and deliver updates about legal matters and service status.
• Regulatory compliance: to fulfil reporting obligations and cooperate with authorities where required by Thai law or court orders.
• Security and fraud prevention: to detect, contribute and mitigate unauthorized access, breaches or misuse of our systems and services.
• Service improvement and analytics: to analyze anonymized usage data to improve site performance and client experience.
• Legal risk management: to assess conflicts of interest, manage professional liability and conduct internal audits consistent with professional duties.

Legal Bases for Processing

Processing is carried out on legal grounds appropriate to the purpose, including performance of contract, compliance with legal obligations, legitimate interests and, where applicable, consent.

• Performance of a contract or steps prior to entering into a contract, such as drafting or reviewing agreements and delivering legal services.
• Compliance with legal obligations arising from Thai law, including anti-funds laundering, tax reporting and regulatory requirements for legal professionals.
• Legitimate interests pursued by axailab, such as ensuring professional services are delivered securely and protecting the legal rights of clients and the firm, balanced against individual rights.
• Consent where required for optional processing activities that are not necessary for service provision, such as certain marketing communications or non-essential analytics.

Rights under GDPR-style Protections

Where relevant data protection frameworks apply to you, axailab respects rights that allow individuals to exercise control over their personal data, subject to legal and professional constraints.

• Right of access: you may request confirmation whether we process your personal data and obtain a copy of the data we hold about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data used in providing services.
• Right to erasure (where applicable): you may request deletion of personal data, subject to retention requirements for legal or regulatory reasons.
• Right to restriction of processing: you may request limitation of processing under defined circumstances, for example while a dispute about accuracy is resolved.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of certain personal data.
• Right to object: you may object to processing based on legitimate interests or for direct marketing; we will consider requests while balancing legal obligations and operational needs.

Cookies and Similar Technologies

axailab.pro uses cookies and similar technologies to enable core website functionality, remember preferences, and collect anonymized analytics to improve service quality and security.

Common cookie types used include session cookies (temporary and required for site operation), persistent cookies (remember preferences) and third-party cookies used by analytics and security vendors.

Cookie categories: strictly necessary (site operation and security), performance and analytics (usage statistics), and functional (preferences). Non-essential cookies are used only with appropriate consent where required.

You can manage cookie preferences through your browser settings and any consent mechanism presented on the site. Disabling certain cookies may affect site functionality, including client portals and document viewers.

For detailed cookie information and management options, refer to our Cookie Policy available on axailab.pro.

Data Sharing and Disclosure

We share personal data only when necessary to deliver services, comply with legal obligations, or with trusted service providers bound by contract to protect data confidentiality and security.

• Service providers under contract: escrow agents, payment processors, IT hosting and document management vendors acting on our instructions.
• Professional advisors and counterparties: cooperating lawyers, notaries, surveyors and other parties involved in property transactions.
• Regulators and public authorities: where required by law, court order, or to fulfil statutory reporting obligations.
• Corporate transactions: in the event of reorganization, merger or sale, we may transfer personal data as part of due diligence and transaction processes while protecting confidentiality.
• Third parties with your consent: where you explicitly authorize disclosure for specific purposes such as third-party consultants or marketing partners.
• Aggregated or anonymized data: we may share non-identifiable statistical information about service usage for research or operational improvement.

International Transfers

Personal data may be transferred to jurisdictions outside Thailand for hosting, analytics or to support multi-jurisdictional matters. Transfers are performed in compliance with applicable laws and only when appropriate safeguards are in place.

Safeguards include contractual agreements with processors, use of recognised standard contractual clauses where applicable, security controls and limited scope transfers necessary for service delivery.

Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes set out in this policy, comply with legal obligations, resolve disputes and maintain necessary professional records.

Account and client files are retained for a period consistent with professional conduct rules and statutory limitations; typical retention for closed matters may range from several years in accordance with Thai regulations.

Communications and transactional records are kept for a defined period to support case management, billing and evidence; retention periods are assessed against legal and operational requirements.

Technical logs and security records are retained for a limited time to support incident response and system integrity, with access restricted to authorised personnel.

When data is no longer required, it is securely deleted or anonymized, except where retention is necessary for legal, regulatory or legitimate business reasons.

Security

axailab implements administrative, technical and physical measures designed to protect personal data against unauthorized access, disclosure, alteration and destruction. Security practices are periodically reviewed and adjusted to address evolving risks.

• Access controls and role-based permissions to limit data access to authorized personnel involved in a matter.
• Encryption in transit and where appropriate at rest for sensitive documents and communications.
• Regular security assessments, staff training on data protection and incident response planning to reduce the likelihood and impact of breaches.

User Rights and Requests

Individuals may exercise the rights available under applicable data protection laws. Requests are processed in a professional and timely manner, and may be subject to identity verification and legal exemptions.

• Right to access: request copies of personal data we hold about you and information on processing activities.
• Right to rectification: request correction of inaccurate or incomplete data used in providing services.
• Right to erasure and restriction: request deletion or limitation of processing, subject to legal retention requirements for legal professionals.
• Right to object and withdraw consent: lodge objections to certain processing activities or withdraw consent where processing is consent-based.
• Right to lodge a complaint: contact our data protection representative or relevant supervisory authority if you believe your rights have not been respected.
• Right to data portability — request a copy of your personal data in a structured, commonly used and machine-readable format for transfer to another provider where applicable under law.
• Right to restrict processing — request limitation of processing where accuracy is contested or processing is unlawful and you prefer restriction over erasure.
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting processing already carried out on that basis.

How to Exercise Your Privacy Rights

To exercise rights such as access, correction, deletion, portability or restriction, please submit a written request to our Data Protection Team. Include your full name, a description of the information you seek, and a copy of a government-issued ID if needed for identity verification. You can contact us at our registered address or via email through the contact form at axailab.pro. For security reasons we may request additional information to verify your identity before fulfilling a request.

[email protected]

We aim to respond to verifiable requests within 30 calendar days. In complex cases or where additional verification is required, we may need a reasonable extension and will notify you of the expected timeframe and reasons for delay.