Privacy policy
Effective Date: 1 October 2026
Last Updated: 1 October 2026
Expat Legal Buddy (“Expat Legal Buddy”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use the Expat Legal Buddy application, website, platform, and related services (collectively, the “Services”).
This Privacy Policy is intended to comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”), together with other applicable laws and regulations.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
1. PERSONAL DATA WE COLLECT
Depending on how you use Expat Legal Buddy, we may collect the following categories of personal data:
1.1 Identification Information
- Full name
- Date of birth
- Nationality
- Passport or identification number
- Photograph
- Signature
- Visa and immigration information
- Other information necessary to verify your identity
1.2 Contact Information
- Telephone number
- Email address
- Residential or correspondence address
- Emergency contact information
- Social media or messaging account information where voluntarily provided
1.3 Legal and Case Information
Where you request legal assistance, we may collect information necessary to understand and handle your matter, including:
- Description of the legal issue
- Facts and circumstances of the case
- Complaints and disputes
- Police or government records
- Court documents
- Contracts and agreements
- Immigration documents
- Employment information
- Company or business information
- Property information
- Communications and correspondence
- Evidence and supporting documents
- Information concerning other persons involved in your matter
Some legal or case information may constitute sensitive personal data under the PDPA. We will process such information only where permitted by law and where an appropriate legal basis exists.
1.4 Payment and Transaction Information
Where applicable, we may collect:
- Payment information
- Transaction records
- Billing information
- Invoices and receipts
- Subscription information
- Information relating to refunds or payment disputes
Payment card information may be processed directly by third-party payment service providers.
1.5 Technical and Usage Information
When you use our Services, we may automatically collect:
- IP address
- Device information
- Browser type
- Operating system
- Device identifiers
- Application version
- Log information
- Date and time of access
- Usage information
- Location information where enabled or permitted
- Cookies and similar technologies
2. HOW WE COLLECT PERSONAL DATA
We may collect personal data:
- Directly from you;
- When you create or use an Expat Legal Buddy account;
- When you submit a legal inquiry or request assistance;
- When you communicate with Expat Legal Buddy;
- When you upload documents or evidence;
- When you communicate with a lawyer or service provider through the platform;
- From third parties where legally permitted;
- From government agencies, courts, police, immigration authorities, or other relevant organizations where necessary for your matter;
- Automatically through your use of the Services; and
- Through cookies and similar technologies.
Where personal data is obtained from another person or organization, Expat Legal Buddy will handle such information in accordance with applicable law.
3. PURPOSES OF PROCESSING
We may collect, use, and process your personal data for the following purposes:
3.1 Providing Legal and Related Services
- Receiving legal inquiries;
- Assessing your request;
- Connecting you with lawyers or appropriate service providers;
- Facilitating consultations;
- Managing legal cases;
- Communicating with you regarding your matter;
- Preparing or transmitting legal documents;
- Coordinating appointments; and
- Providing emergency or urgent assistance where requested.
3.2 Account and Platform Management
- Creating and managing your account;
- Authentication and identity verification;
- Maintaining platform functionality;
- Providing customer support;
- Managing subscriptions and payments; and
- Preventing fraud, abuse, or unauthorized activity.
3.3 Legal and Regulatory Compliance
We may process personal data where necessary to:
- Comply with applicable laws and regulations;
- Respond to lawful requests from courts, government agencies, police, immigration authorities, or other competent authorities;
- Establish, exercise, or defend legal claims;
- Protect our legal rights and interests; and
- Fulfil legal, accounting, tax, or regulatory obligations.
3.4 Security
We may process personal data to:
- Protect users and the platform;
- Detect and prevent fraud;
- Detect unauthorized access;
- Investigate security incidents; and
- Maintain system security and integrity.
3.5 Service Improvement
We may use information to:
- Improve the Services;
- Understand how users interact with the platform;
- Develop new features;
- Troubleshoot technical problems; and
- Improve service quality.
Where appropriate, information may be aggregated or anonymized so that it cannot reasonably identify an individual.
4. LEGAL BASES FOR PROCESSING
Expat Legal Buddy will process personal data only where there is an appropriate legal basis under the PDPA.
Depending on the circumstances, the legal basis may include:
- Your consent;
- Performance of a contract or taking steps at your request before entering into a contract;
- Compliance with a legal obligation;
- Protection of vital interests;
- Performance of a task carried out in the public interest or exercise of official authority where applicable;
- Legitimate interests, where permitted by law and where such interests are not overridden by your rights; or
- Establishment, exercise, or defence of legal claims.
Where consent is required, we will request your consent in an appropriate manner.
You may withdraw consent where permitted by law. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
5. SENSITIVE PERSONAL DATA
Certain information may be classified as sensitive personal data under the PDPA, including information concerning:
- Racial or ethnic origin;
- Political opinions;
- Religious or philosophical beliefs;
- Criminal records;
- Health information;
- Disability;
- Biometric information;
- Genetic information;
- Sexual behavior;
- Trade union information; and
- Other categories recognized as sensitive personal data under applicable law.
Because Expat Legal Buddy provides legal-related services, you may voluntarily provide information that falls within these categories.
Expat Legal Buddy will process sensitive personal data only where permitted by the PDPA and where an appropriate legal basis and, where required, explicit consent or another applicable legal exception exists.
6. DISCLOSURE OF PERSONAL DATA
We may disclose personal data where necessary for the purposes described in this Privacy Policy.
Recipients may include:
6.1 Lawyers and Legal Professionals
Where you request legal assistance, we may provide relevant information to a lawyer or legal professional selected or assigned to handle your matter.
Only information reasonably necessary for the relevant service should be disclosed.
6.2 Service Providers
We may disclose information to trusted service providers who assist us with:
- Cloud hosting;
- IT services;
- Payment processing;
- Customer support;
- Communications;
- Document management;
- Identity verification;
- Security;
- Analytics; and
- Other technical or operational services.
Such providers may process personal data only as necessary to provide their services and subject to appropriate contractual and security safeguards.
6.3 Government and Law Enforcement Authorities
We may disclose personal data where required or permitted by law, including to:
- Courts;
- Police;
- Prosecutors;
- Immigration authorities;
- Government agencies;
- Regulators; and
- Other competent authorities.
6.4 Business Transactions
If Expat Legal Buddy is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.
7. INDEPENDENT LAWYERS AND THIRD-PARTY SERVICE PROVIDERS
Expat Legal Buddy may operate as a platform connecting users with independent lawyers, legal professionals, translators, consultants, or other service providers.
Unless expressly stated otherwise, such professionals may operate independently from Expat Legal Buddy.
When you voluntarily provide information directly to a lawyer or third-party service provider, that professional or organization may also have its own privacy obligations and policies.
Expat Legal Buddy will not use your personal data for purposes unrelated to the Services except where permitted by law or with your consent where required.
8. INTERNATIONAL TRANSFERS
Some of our service providers, technology providers, lawyers, or other recipients may be located outside Thailand.
Where personal data is transferred outside Thailand, Expat Legal Buddy will comply with the applicable requirements of the PDPA concerning international transfers and will implement appropriate safeguards where required.
9. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
- Providing Services;
- Managing your account;
- Maintaining legal and business records;
- Complying with legal, accounting, and regulatory obligations;
- Resolving disputes; and
- Establishing, exercising, or defending legal claims.
Retention periods may vary depending on the nature of the information and the relevant legal requirements.
When personal data is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law and our internal procedures.
10. DATA SECURITY
Expat Legal Buddy takes reasonable technical and organizational measures to protect personal data against:
- Unauthorized access;
- Loss;
- Misuse;
- Alteration;
- Disclosure;
- Destruction; and
- Other unlawful or unauthorized processing.
Security measures may include access controls, authentication, encryption where appropriate, secure storage, monitoring, and internal procedures.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. YOUR RIGHTS UNDER THE PDPA
Subject to applicable legal conditions and limitations, you may have the following rights:
11.1 Right to Access
You may request access to your personal data held by us.
11.2 Right to Rectification
You may request correction of inaccurate or incomplete personal data.
11.3 Right to Erasure
You may request deletion of your personal data where the legal requirements for deletion are satisfied.
11.4 Right to Restriction of Processing
You may request restriction of processing in circumstances permitted by law.
11.5 Right to Object
You may object to certain processing of your personal data where permitted by law.
11.6 Right to Data Portability
Where applicable, you may request your personal data in a format that is usable for transmission to another data controller.
11.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal limitations.
11.8 Right to Lodge a Complaint
You may lodge a complaint with the competent authority where you believe your personal data has been processed in violation of applicable law.
Requests relating to your rights may be subject to verification and applicable legal limitations.
12. COOKIES AND SIMILAR TECHNOLOGIES
Expat Legal Buddy may use cookies and similar technologies to:
- Operate the platform;
- Remember preferences;
- Maintain login sessions;
- Analyze platform usage;
- Improve user experience;
- Maintain security; and
- Provide or measure communications and marketing where applicable.
You may be able to control cookies through your browser or device settings.
Some cookies may be necessary for the Services to function properly.
13. MARKETING COMMUNICATIONS
Where permitted by law, Expat Legal Buddy may send information concerning:
- New services;
- Features;
- Promotions;
- Updates;
- Events; or
- Other relevant information.
Where consent is required, we will obtain the appropriate consent before sending marketing communications.
You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or contacting us.
You may continue to receive essential service-related communications even after opting out of marketing communications.
14. CHILDREN AND MINORS
Expat Legal Buddy's Services may involve legal assistance for individuals of different ages.
Where applicable law requires parental or legal guardian involvement or consent for the collection or processing of a minor's personal data, Expat Legal Buddy will take appropriate measures to comply with such requirements.
If you believe that a minor has provided personal data to us without appropriate authorization, please contact us so that we can review the matter.
15. CHANGES TO THIS PRIVACY POLICY
Expat Legal Buddy may update this Privacy Policy from time to time to reflect:
- Changes in our Services;
- Changes in applicable laws;
- Changes in technology; or
- Changes in our data processing practices.
When material changes are made, we may provide notice through the application, website, email, or other appropriate means.
The updated Privacy Policy will indicate the applicable Last Updated date.
16. CONTACT US
If you have questions regarding this Privacy Policy, your personal data, or the exercise of your rights under the PDPA, please contact:
Expat Legal Buddy
Data Protection Contact / Data Protection Officer: Kurt
Email: privacy@expatlegalbuddy.com
Telephone: TBA
Address: 109/44 Moo 1, Bophut, Koh Samui 84320
Website: https://www.expatlegalbuddy.com
Last Updated: 1 October 2026