This Privacy Policy explains how nexsmartz collects, uses, stores and shares personal data in connection with legal services provided to realtors and related visitors to our website (nexsmartz.pro). The policy describes the types of data we process, lawful bases for processing, how we protect information, retention practices, and how you may exercise your rights. We adopt industry-standard administrative and technical safeguards and limit access to data on a need-to-know basis. Where local regulation differs, we will comply with applicable Thai law and relevant international standards when processing data cross-border.
nexsmartz Co., Ltd., Business ID 6308477490232, Soi Muban Supalak Phanichhome 5, Bueng Kham Phroi Sub District, Amphoe Lam Luk Ka District, Pathum Thani Province 12150, Thailand[email protected]Soi Muban Supalak Phanichhome 5, Bueng Kham Phroi Sub District, Amphoe Lam Luk Ka District, Pathum Thani Province 12150, Thailand2026-03-06
Definitions
For clarity, the following definitions apply throughout this policy. They specify the meaning of key terms used to describe our processing of personal data and the scope of the privacy protections we apply to clients, partners and website visitors.
Personal data means any information that identifies or can be used to identify an individual directly or indirectly, for example names, contact details, identification numbers, transaction records, or any other data linked to a natural person.
Processing covers any operation performed on personal data, including collection, recording, organization, structuring, storage, retrieval, use, disclosure, transfer, or erasure performed by automated or manual means.
User refers to a visitor to nexsmartz.pro, a prospective client, existing client, or an authorized representative of a real estate professional who interacts with nexsmartz in connection with legal services.
Service refers to legal advisory, contract preparation and review, compliance assessments, dispute support, and other professional legal services that nexsmartz provides to real estate professionals in Thailand.
Cookies and similar technologies are small data files placed on your device or browser that help us recognise repeat visitors, support website functionality, and collect analytics to improve service delivery.
Data we collect
We collect personal data that is necessary to provide legal services, fulfill contractual obligations, comply with regulation, and support business operations. Data may come directly from you, be generated automatically, or be received from third parties with a legitimate basis for sharing.
Data you provide to us
When you engage with nexsmartz or contact us through the website or other channels, you may provide the following categories of information:
Identification and professional details: full name, national ID or passport number where necessary for legal processes, and professional license information.
Contact details: email address, telephone number, business address, and postal address for communication and correspondence.
Business and transaction information: company name, registration numbers, consultant or agency affiliation, and role in the transaction.
Transaction documents: property titles, contracts, due diligence documents, invoices, business statements, and any documents you provide to support legal work.
Communications and case notes: messages, instructions, meeting notes and records necessary to deliver legal services and manage the client relationship.
Billing and payment data: invoicing information, bank account details, payment confirmations and related records required for billing and accounting.
Data collected automatically
When you access nexsmartz.pro or interact with certain digital services, we may automatically collect technical and usage data to support site functionality, security and analytics.
Technical identifiers such as IP address, device type, browser type and version, and operating system.
Usage data including pages visited, time spent on site, navigation paths and clicks for analytics and user experience improvements.
Cookies and tracking identifiers used to maintain sessions and preferences.
Location data derived from IP address where necessary for regional compliance or service delivery.
Error logs and performance data used for troubleshooting and protecting systems.
Aggregated statistics that do not identify an individual personally, used for business analysis.
Third-party sources
We may receive personal data from external sources where needed to provide services or verify information. Such sharing is limited to data necessary for legal services and compliance.
Property registries, public records or official databases used for due diligence and title verification.
Payment providers and banks for transaction processing and payment confirmation.
Service providers such as cloud hosting, analytics vendors, and professional advisors acting under contract and confidentiality obligations.
Purposes of processing personal data
We process personal data for clear, specified purposes aligned with delivering professional legal services to real estate clients and meeting regulatory and operational needs.
To deliver legal advice and representation, prepare and review contracts, conduct due diligence, and manage transactions.
To perform contractual obligations, including billing, invoicing and payment reconciliation.
To detect, prevent and respond to fraud, misconduct, security incidents or legal claims.
To comply with legal and regulatory obligations, including anti-funds laundering checks and tax reporting.
To maintain client records, file management, and case administration necessary for competent legal representation.
To improve our services and website functionality through analytics and feedback collection, where aggregated data is used to guide development.
To communicate with you about case progress, service updates, and administrative matters related to your engagement.
To facilitate legitimate business operations such as dispute resolution, audits, and transfers in the event of a corporate transaction, subject to appropriate safeguards.
Legal basis for processing
We rely on one or more lawful bases for processing personal data depending on the processing activity and applicable law. These include contractual necessity, compliance with legal obligations, legitimate interests, and consent where required.
Performance of a contract: processing necessary to provide agreed legal services and fulfil contractual duties.
Legal obligation: processing required to comply with Thai statutory obligations or court orders.
Legitimate interests: processing for fraud prevention, security, dispute resolution and business administration where such interests are balanced against individual privacy rights.
Consent: where specific processing (such as marketing communications) is based on your freely given consent, you may withdraw consent at any time without affecting processing prior to withdrawal.
Data subject rights and comparable protections
Depending on applicable law, you may have rights regarding your personal data such as access, correction, restriction, erasure, portability and objection. While Thailand has its own data protection framework, we aim to respect internationally recognised rights and will respond to valid requests in accordance with law.
Right of access: you may request a copy of personal data we hold about you.
Right to rectification: you may request correction of inaccurate or incomplete data.
Right to erasure: where applicable, you may request deletion of personal data that is no longer necessary or unlawfully processed.
Right to restriction: you may request restriction of processing in certain circumstances.
Right to data portability: where applicable, you may request a structured, commonly used and machine-readable copy of your data.
Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.
Cookies and tracking technologies
nexsmartz.pro uses cookies and similar technologies to support site functionality, security, and analytics. Cookies help us remember preferences, maintain sessions, and provide a stable user experience.
We use session cookies for site navigation, persistent cookies for user preferences, and third-party cookies for analytics. These cookies do not typically contain personal data beyond identifiers required for functionality.
Categories include strictly necessary cookies, performance and analytics cookies, and functional cookies. Marketing cookies are used only with consent.
You can manage cookie preferences through your browser settings and the cookie control options provided on our website. Disabling certain cookies may affect site functionality.
Cookie Policy and preferences
Data sharing and disclosure
We limit sharing of personal data to what is necessary for service delivery, legal compliance, or with vendors acting on our instructions under contractual confidentiality commitments.
Service providers: IT, cloud hosting, document storage, analytics vendors and other providers that support our operations under contractual safeguards.
Professional advisors: auditors, accountants, and external legal counsel where required to support a matter.
Authorities and regulators: when required by law, subpoena, or regulatory obligation in Thailand or in jurisdictions involved in a matter.
Transaction counterparties: other parties involved in a specific legal matter or transaction, subject to confidentiality and only where necessary.
Business transfers: in the event of a corporate reorganization, merger or sale, personal data may be transferred as part of the transaction with appropriate protections.
Affiliates and related entities: where required to administer services, manage risk, or comply with legal obligations, under common privacy commitments.
International data transfers
Personal data may be transferred to, processed or stored in jurisdictions outside Thailand to enable service delivery, use of cloud providers, or involvement of overseas counterparties. When transfers occur, we implement appropriate safeguards to protect personal data.
Safeguards may include contractual clauses requiring adequate protection, reliance on approved transfer mechanisms where available, encryption, and limiting access to authorised personnel. We assess third-party practices to ensure compliance with reasonable security standards.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal or regulatory retention obligations, and to resolve disputes or enforce agreements.
Client account records and matter files are retained in accordance with professional responsibility requirements and internal retention schedules that reflect applicable Thai law and practice.
Communications, case notes and transactional correspondence are retained for the duration necessary to manage the matter and for a period thereafter to address potential claims or regulatory needs.
Technical logs and backup data are retained for operational and security purposes for limited periods defined in our IT retention policy.
When retention periods expire, we securely delete or anonymize personal data in a manner consistent with our security policies and applicable law.
Security of personal data
nexsmartz implements reasonable administrative, technical and physical safeguards to protect personal data from unauthorized access, disclosure, alteration or destruction. Security measures are periodically reviewed and updated to reflect evolving risks.
Access controls and role-based permissions to limit data access strictly to authorized personnel.
Encryption of data in transit and where appropriate at rest, along with secure communication channels for client platform.
Regular staff training on data protection, incident response procedures, and contractual requirements for third-party providers.
Your rights and how to exercise them
To exercise your rights regarding personal data, or to ask questions about our processing activities, contact us using the details provided below. We will respond in accordance with applicable legal requirements and, where necessary, may request proof of identity to process a request.
Submit requests for access, correction, deletion, restriction, portability or objection using the contact details below. We aim to acknowledge requests promptly and respond within applicable statutory timeframes.
If you are not satisfied with our response, you may contact the relevant Thai supervisory authority or other competent authority in your jurisdiction for further review.
Right to request restriction of processing of personal data where accuracy is contested or processing is unlawful but you oppose erasure; we will evaluate and, where appropriate, limit processing while concerns are resolved.
Right to data portability for personal data you have provided in a structured, commonly used, machine-readable format when processing is based on consent or contract and carried out by automated means.
Right to object to processing for direct marketing purposes or for reasons relating to your particular situation where we rely on legitimate interests; upon objection we will cease the specified processing unless compelling legitimate grounds prevail.
Right to withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
Right to lodge a complaint with a supervisory authority in Thailand if you believe our handling of your personal data violates applicable data protection laws.
Right to receive information about recipients or categories of recipients to whom your personal data have been or will be disclosed, including any international transfers and safeguards applied.
How to exercise your data rights
To exercise any of the rights listed above, contact our data protection team with a clear description of your request. Provide sufficient information to identify yourself and the records involved. We may request additional information to verify your identity before processing requests. Requests are handled in accordance with applicable Thai law and internal procedures.
We aim to respond to verified requests promptly and no later than 30 days from receipt. If a request is complex or there are multiple requests, we may extend this period by up to an additional 30 days and will inform you of the reason and expected timeline.
Marketing communications and opt-out
nexsmartz may send marketing information about legal updates, service offerings, or events relevant to real estate professionals in Thailand when you have consented or when permitted by law. Communications will be relevant to real estate legal practice and compliance topics, such as contract drafting, regulatory changes, and transaction risk management.
You may opt out of marketing communications at any time by following the unsubscribe links in emails or by contacting our data protection team. Opt-out requests will be processed promptly; transactional communications related to services you receive will continue unless you cancel those services.
Children’s privacy
Our services are intended for professional users and adults. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have collected personal data from a minor without appropriate authorization, we will take steps to delete that information as required by applicable law.
Links to third-party sites
Our website may contain links to third-party resources that have their own privacy notices and practices. nexsmartz is not responsible for the content or privacy practices of external sites. Review the privacy policies of any third-party site before providing personal data.
Changes to this privacy policy
We periodically review and may update our privacy policy to reflect legal, technical, or business developments. Material changes will be communicated via our website at nexsmartz.pro and, where appropriate, by direct notification. Continued use of our services after changes indicates acceptance of the updated policy.
Contact and data controller
Data controller: nexsmartz. Registered business ID: 6308477490232. Registered address: Soi Muban Supalak Phanichhome 5, Bueng Kham Phroi Sub District, Amphoe Lam Luk Ka District, Pathum Thani Province 12150, Thailand. For privacy inquiries, data subject requests, or questions about this policy, contact: [email protected] or phone +66976405030. Operational inquiries are handled in English and Thai as needed.