Privacy Policy

Definitions

This section clarifies the terms used throughout the policy so readers can interpret processing descriptions with precision and legal certainty.

Purposes of Processing

We process personal data only for clear, specified purposes necessary to deliver our services, ensure compliance with legal duties, and maintain secure operations. Below are the primary purposes.

• To verify identity, validate documents and perform notarial acts in accordance with applicable law and professional standards.
• To communicate with clients, schedule appointments, provide status updates and respond to inquiries related to notarial services.
• To process payments, issue invoices and maintain accounting records required for tax and regulatory purposes.
• To maintain records of notarial acts, case files and archival copies as required by legal or professional retention obligations.
• To protect the security and integrity of our systems, detect fraud, and prevent unauthorized access to client data.
• To analyze site usage, improve service design and functionality, and perform internal business analytics to enhance service delivery.
• To share information with third-party service providers or regulators when necessary for legal compliance or to fulfill contractual obligations.
• To respond to lawful requests from authorities, including subpoenas or court orders, when required by law.

Legal Basis for Processing

We rely on appropriate legal bases for processing personal data, considering the nature of the data and the purpose of processing under applicable law.

• Performance of a contract: processing necessary to provide notarial services you have requested.
• Compliance with legal obligations: processing required to satisfy statutory, regulatory or professional obligations.
• Legitimate interests: where processing is necessary for security, fraud prevention, recordkeeping and business administration, balanced against individuals' rights.
• Consent: where lawfully required, for specific processing activities such as optional marketing communications or certain cookies; users may withdraw consent when applicable.

Data Subject Rights

We recognize data subject rights consistent with principles of transparency and accountability. Rights may vary by jurisdiction; we follow applicable Thai law and relevant international standards where appropriate.

• Right of access: you may request confirmation whether we process your personal data and obtain a copy of such data.
• Right to rectification: you may request correction of inaccurate or incomplete personal data held by us.
• Right to erasure: in certain circumstances you may request deletion of personal data, subject to legal and professional retention obligations.
• Right to restriction of processing: you may request limitation of processing where accuracy is contested or legal grounds are in dispute.
• Right to data portability: where applicable, you may request a structured, commonly used and machine-readable copy of data you provided.
• Right to object and withdraw consent: you may object to certain processing activities or withdraw consent previously given, without affecting processing done lawfully before withdrawal.

Cookies and Tracking

We use cookies and similar technologies to provide core site functionality, improve user experience and obtain analytics data. You can manage cookie preferences through your browser and available cookie controls on the site.

Types of cookies used include session cookies for basic navigation, persistent cookies for preferences, security cookies for fraud prevention and analytics cookies for performance measurement.

Cookie categories: strictly necessary, performance/analytics, functional and optional marketing cookies. Strictly necessary cookies are required for core service delivery.

You can manage cookie settings via your browser or by using the cookie controls on hyperjurix.digital. Disabling certain cookies may affect site functionality and the availability of some services.

For more detail, consult our dedicated Cookie Policy available on the website.

Data Sharing and Disclosure

We limit sharing of personal data to necessary and authorized recipients. Any third-party sharing is subject to contractual safeguards and confidentiality obligations.

• Service providers engaged to perform payment processing, hosting, analytics and communications on our behalf under data processing agreements.
• Regulatory and law enforcement authorities when disclosure is required by law, court order or to respond to legal processes.
• Professional advisors and external experts who assist with legal, accounting or technical matters when required for service delivery.
• Other parties with your explicit instruction or consent, for instance when you authorize document platform with third parties.
• Potential acquirers or business partners in the event of a merger, sale or transfer of assets, subject to appropriate safeguards and notice to affected individuals.
• Aggregated or anonymized information that cannot reasonably be used to identify an individual may be shared for research or business intelligence purposes.

International Transfers

Personal data may be transferred to service providers or partners located outside Thailand. Such transfers are undertaken only where necessary and with safeguards appropriate to the jurisdiction and data sensitivity.

We use contractual clauses, security measures and careful vendor selection to protect data during international transfers. Transfers comply with applicable legal requirements and are documented.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described here, to meet legal, regulatory or professional retention requirements, or to resolve disputes.

Account and client records are retained for the duration of the professional relationship and for a period afterwards as required by law or professional standards to support potential audits and regulatory inquiries.

Communications, emails and messages relating to notarial instructions are retained according to case file retention schedules and deleted or archived following applicable retention timelines.

System logs and security records are kept for a period necessary to contribute incidents and maintain system integrity, then securely deleted or anonymized.

When data retention periods expire, personal data is securely deleted, irreversibly anonymized or archived in compliance with our recordkeeping obligations and security practices.

Security Measures

We implement technical and organizational measures proportionate to the sensitivity of data processed to protect against unauthorized access, disclosure, alteration or destruction. Security is reviewed periodically and updated in line with evolving risk.

• Encryption of data in transit and at rest where appropriate, to protect client information and documents.
• Access controls, role-based permissions and multi-factor authentication for systems used to store or process personal data.
• Regular security assessments, staff training on data protection practices and incident response procedures to address potential breaches.

Exercising Your Rights

You may exercise your data subject rights by contacting hyperjurix using the details below. We will assess requests in accordance with applicable law and respond within a reasonable timeframe.

• Right of access: request confirmation of processing and a copy of personal data held by us.
• Right to rectification: request correction of inaccurate or incomplete data without undue delay.
• Right to erasure: request deletion where legal and professional obligations do not require retention of the data.
• Right to restrict processing: request limitation of use where appropriate under applicable law.
• Right to data portability: request a structured, commonly used, machine-readable copy of data you provided when technically feasible.
• Right to withdraw consent: withdraw consent for processing activities that are based on consent, without affecting processing carried out prior to withdrawal.
• Right to object: object to processing for direct marketing or to processing based on legitimate interests where permitted by law.
• Right to lodge a complaint with a supervisory authority: if you consider our processing unlawful, you may contact the relevant data protection authority in your jurisdiction.

Privacy Rights and Data Access Requests

Individuals may request access to, correction of, restriction of processing, portability of, or deletion of their personal data held by hyperjurix. To submit a request, provide a clear description of the information sought and a copy of an ID for verification. Requests should specify the preferred form of response and any relevant account or case references. We process requests in accordance with applicable Thai data protection laws and applicable international standards where relevant.

[email protected]

We aim to acknowledge and address valid requests promptly. In most cases we respond within 30 calendar days of receipt. Complex requests or requests requiring third-party coordination may take up to 60 calendar days; we will inform you if an extension is necessary and the reasons for it.