Privacy Policy

1. Introduction

Havenwell ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our legal advisory services.

We operate in accordance with Thailand's Personal Data Protection Act (PDPA) and maintain practices that respect the privacy rights of all individuals with whom we interact.

For privacy-related inquiries, please contact us at [email protected].

2. Data Collection

Personal Data We Collect

When you engage our services or use our website, we may collect the following types of personal data:

• Contact information: name, email address, phone number, mailing address
• Identification data: passport details, visa information, date of birth, nationality
• Financial information: bank account details, income verification documents, pension statements
• Legal documents: wills, powers of attorney, property ownership records
• Health insurance information: policy details, coverage verification
• Communication records: email correspondence, consultation notes, service requests
• Website usage data: IP address, browser type, pages visited, time spent on site

How We Collect Data

• Directly from you when you submit contact forms, request consultations, or provide documents
• From third parties such as embassies, banks, or insurance providers (with your consent)
• Automatically through website cookies and analytics tools
• During in-person consultations or phone conversations

Legal Basis for Processing

We process your personal data based on:

• Consent: You have given explicit consent for specific purposes
• Contract performance: Processing is necessary to fulfill our legal advisory services
• Legal obligation: We must process data to comply with Thai legal requirements
• Legitimate interests: Processing supports our business operations while respecting your rights

3. Data Usage

Primary Purposes

We use your personal data to:

• Provide retirement visa advisory, estate planning, and financial setup services
• Prepare and submit visa applications and extension documentation
• Draft Thai wills, powers of attorney, and other legal documents
• Coordinate with Thai immigration, banks, insurance providers, and embassies
• Maintain client records and case files
• Send service reminders, renewal notifications, and updates on regulatory changes
• Respond to your inquiries and provide customer support
• Process payments and maintain financial records

Marketing Communications

With your consent, we may send informational emails about:

• Immigration policy changes affecting retirees
• Updates to banking or insurance requirements
• General legal advisory information relevant to long-stay residents

You may opt out of marketing communications at any time by contacting us or using the unsubscribe link in emails.

4. Data Sharing and Disclosure

Third-Party Sharing

We may share your personal data with:

• Thai Immigration Bureau: For visa applications and extensions
• Thai Banks: For account opening and income verification
• Insurance Providers: For health insurance procurement
• Embassies and Consulates: For income letters or document authentication
• District Offices: For will registration and legal document processing
• Professional Advisors: Your home-country attorneys or accountants (with your consent)
• Service Providers: Document translation, notarization, courier services

All third-party sharing occurs only to the extent necessary to provide our services and with appropriate confidentiality measures in place.

Legal Disclosures

We may disclose your information when required by Thai law, court order, or government authority, or when necessary to protect our legal rights, prevent fraud, or ensure public safety.

5. Data Protection Measures

Security Practices

We implement the following security measures:

• Encrypted transmission of sensitive data via secure protocols
• Secure physical storage for original documents in locked filing systems
• Password-protected digital files with restricted access
• Regular security audits and updates to our systems
• Staff training on data protection and confidentiality obligations
• Limited access to personal data on a need-to-know basis

Data Retention

We retain your personal data for the following periods:

• Active clients: Throughout the duration of our advisory relationship
• Closed client files: Seven years after engagement conclusion (in compliance with Thai legal practice requirements)
• Marketing data: Until you withdraw consent or request deletion
• Website analytics: Typically 24 months

6. Cookies and Website Analytics

Types of Cookies Used

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and choices

For detailed information about cookies, please see our Cookie Policy.

7. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights:

Access and Portability

You may request access to your personal data and receive a copy in a commonly used electronic format.

Rectification

You may request correction of inaccurate or incomplete personal data.

Erasure

You may request deletion of your personal data, subject to legal retention requirements for legal advisory records.

Restriction of Processing

You may request that we limit how we process your data in certain circumstances.

Objection

You may object to processing based on legitimate interests or for marketing purposes.

Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Filing Complaints

You have the right to lodge a complaint with Thailand's Personal Data Protection Committee or relevant supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Children's Privacy

Our services are designed for adults aged 50 and above seeking retirement advisory. We do not knowingly collect personal data from individuals under 18 years of age.

9. International Data Transfers

In some cases, we may transfer your data outside Thailand, such as:

• Coordinating with your home-country legal advisors
• Verifying income with foreign embassies or financial institutions
• Using cloud-based services hosted abroad

When transferring data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognized under Thai law.

10. Policy Updates

We may update this Privacy Policy periodically to reflect:

• Changes in Thai data protection legislation
• Updates to our business practices
• New technologies or service offerings

Material changes will be communicated via email to active clients and prominently posted on our website. The "Last Updated" date at the top of this policy indicates the most recent revision.

11. Contact Information