This page explains, in plain language, what personal data we collect, why we collect it, who we share it with, how long we keep it, and your rights — under Thailand's PDPA and, where it applies, UK-GDPR. Your privacy and your documents matter to us.
In this policy, “we”, “us” and “our” mean UK Visa From Thailand (operating the website ukvisafromthailand.com). “You” means the person whose personal data we handle — usually a Thai visa applicant, and sometimes a UK-based partner or sponsor.
The data controller for your personal data is UK Visa From Thailand, which operates the website ukvisafromthailand.com and can be reached by email at visa@ukvisafromthailand.com. This means we decide why and how your data is used. We engage trusted processors (for example translators, payment providers and hosting) to help us deliver the service, but we remain responsible for your data.
For any privacy question, or to exercise your rights, email us at visa@ukvisafromthailand.com or use our Contact page (contact.html).
We comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) for data subjects in Thailand, and with UK-GDPR where it applies — for example when we handle the data of a UK-based partner or sponsor. Because we help with UK visas, your data often moves between Thailand, the United Kingdom and our service providers; we explain those cross-border transfers below.
Some identity and immigration documents may contain sensitive or “special category” data (for example data that reveals health, religion, or biometric-style identity data).
When the documents you give us contain sensitive (special-category) data, we only handle it where we have a lawful condition to do so — your explicit consent and/or because it is necessary to perform our contract with you (preparing and translating your application). Please do not send us sensitive data we did not ask for. If you send extra documents we do not need, we will not use them and will delete them securely.
Under both the PDPA and UK-GDPR we must have a lawful basis for each purpose:
Where we rely on consent, we capture it clearly — for example by a tick-box or a message confirming you agree. You can withdraw consent at any time by emailing visa@ukvisafromthailand.com or messaging us on our LINE Official account (see our Contact page, contact.html). Withdrawing consent does not affect processing we already lawfully carried out. Please note that if you withdraw consent for data we need to do the work, we may no longer be able to deliver the service.
We share only what is necessary, under contracts/data-processing agreements, and we never sell your data. We may share data with:
Because we help with UK visas, your data moves between Thailand, the United Kingdom and processors located in other countries. When data leaves Thailand we rely on an appropriate safeguard — your consent, the fact that the transfer is necessary to perform our contract with you, and/or an appropriate-safeguard or adequacy mechanism — in line with the PDPA's cross-border transfer rules and UK-GDPR transfer rules.
Under the PDPA and UK-GDPR you have the right to:
To exercise any right, email us at visa@ukvisafromthailand.com or use our Contact page (contact.html). We may need to verify your identity first. We aim to respond within a reasonable period (PDPA) — and within one month where UK-GDPR applies.
We keep your case data only as long as needed to deliver the service and to meet our Thai tax, accounting and AML record-keeping obligations, and for any period the law requires. After that we securely delete or anonymise it. Documents you sent only for a one-off task (for example a translation) are removed once they are no longer needed.
We use encryption in transit, access controls so only authorised people see your data, staff confidentiality, and careful handling of identity documents. No system is ever 100% secure, but we take reasonable steps to keep your data safe and to limit who can access it.
Some applications involve dependent children. Where we handle a child's data, we do so only with the consent of a parent or legal guardian and with extra care.
Our website uses cookies in four categories: strictly necessary (to make the site work), functional (to remember your choices, such as your language), analytics (to understand how the site is used), and marketing. We show an opt-in consent banner with a clear “Reject all” option and granular choices by purpose, and we log your consent. You can manage or withdraw your choices at any time. Some cookies are set by our providers — for example analytics and Stripe.
We have procedures to detect and assess data breaches. Where the law requires, we will notify the relevant regulator (the Thai PDPC and/or the UK ICO) and any affected individuals.
We only send marketing or promotional messages — including on LINE — if you have given consent. You can opt out at any time, easily, by telling us or using any unsubscribe option provided.
We may update this policy from time to time. The version on this page, with the “last updated” date, is the current one. For any privacy question or to exercise your rights, contact:
Please also read these documents, which work alongside this Privacy Policy: