Privacy Policy — Updated 10 April 2026 Last updated: 10-04-2026

Privacy Policy Overview

nunirixo is committed to protecting the personal data of entrepreneurs and business contacts who use our legal services. This policy explains what information we collect, why we collect it, how we use it, and how you can manage your data. We use personal data to deliver legal advice, draft and manage documentation, process payments, and communicate about matters relevant to your business. Our offices are located at 401, Klai Sub District, Amphoe Tha Sala District, Nakhon Si Thammarat Province 80160, Thailand. For questions about this policy or to exercise your rights, contact us at +66968162124 or use the address above. nunirixo operates under Business ID 9049850468835 and maintains practices designed to limit data access to legitimate business needs while complying with applicable law. If you need assistance, a member of our team will explain how your data is handled and available options.

10-04-2026
nunirixo Co., Ltd.
401, Klai Sub District, Amphoe Tha Sala District, Nakhon Si Thammarat Province 80160, Thailand
01

Key Definitions

This section defines terms used in the policy to make it easier to understand what we mean by 'personal data', 'processing', and related concepts as they apply to our legal services for entrepreneurs.

Personal data means any information that identifies or can reasonably identify an individual, such as a name, email address, telephone number, national ID, or business contact details. For entrepreneurs, this may include director names, business registration details, and representatives' contact information.
Processing means any operation performed on personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, or erasure as part of delivering legal services.
User refers to clients, prospective clients, business contacts, and other individuals who interact with nunirixo while seeking legal advice, subscribing to services, or communicating about business matters.
Service refers to the legal advisory, contract drafting, compliance support, dispute handling, and any ancillary services provided by nunirixo to entrepreneurs and small businesses.
Cookies are small text files placed on a device to store preferences, session information, and identifiers. We use cookies to improve site functionality, analyze usage, and support essential service features.
02

What Data We Collect

We collect data to provide, manage, and improve legal services. Collection happens when you communicate with us, use our website, enter into an engagement, or when we receive information from trusted third parties necessary to fulfill professional obligations.

03

Data You Provide

At nunirixo (nunirixo.info) we collect only the information you provide intentionally to assess and deliver legal services tailored to entrepreneurs in Thailand. As of 11-03-2026 we use personal and business contact details, identification and company documents, case-related facts, and communications to evaluate your needs, prepare advisory materials, draft contracts, assist with regulatory filings and handle billing. Processing is limited to what is necessary for these purposes and for compliance with applicable Thai law. Your data is stored securely at our office: 401, Klai Sub District, Amphoe Tha Sala District, Nakhon Si Thammarat Province 80160, Thailand. For transparency, our Business ID is 9049850468835. Sharing information with third parties occurs only when it is essential for your matter (for example, government filings, court submissions or trusted service providers) and under confidentiality safeguards. You have the right to request access, correction or deletion of your personal data and to ask questions about how it is used. To discuss how your information will be handled for your specific case or to exercise your rights, contact our team at +66968162124 or via the contact form on nunirixo.info. Choosing nunirixo means working with a team focused on clear, practical legal support for entrepreneurs while keeping your data handling straightforward and professional.

  • Contact details: name, email address, phone number, company name and role.
  • Business and registration information: company registration numbers, business addresses, and incorporation documents.
  • Case and matter details: contracts, correspondence, transaction records, and information necessary for legal advice.
  • Identity documents where required for verification: copies of ID, passports, or corporate ownership records.
  • Business and billing information: invoicing data, bank details, and payment confirmations.
  • Marketing preferences and opt-in choices for newsletters or event invitations.
04

Data Collected Automatically

When you visit our website or use online services, certain technical and usage data are collected automatically to maintain site performance, enhance user experience, and support security monitoring.

  • Technical identifiers: IP address, device type, browser version, and operating system.
  • Usage data: pages visited, session duration, clicks, and navigation paths on nunirixo.info.
  • Analytics data: aggregated metrics collected through analytics tools to improve service delivery and content relevance.
  • Cookies and local storage identifiers used to remember preferences and login sessions.
  • Geolocation at a coarse level derived from IP address for language and regional customization.
  • Error and performance logs to diagnose technical problems and improve reliability.
05

Third-Party Data Sources

We may receive personal data from third parties that help us verify information or support service delivery. Such data is used only when necessary and under appropriate controls.

  • Payment processors and banks for transaction verification and billing reconciliation.
  • Professional advisors and external counsel engaged to support client matters under confidentiality terms.
  • Public registers and corporate databases for verification of business registration and ownership.
06

Purposes of Processing

We process personal data to operate our legal practice effectively and to provide clear, timely, and relevant advice to entrepreneurs. Below are the primary purposes for processing.

  • To deliver legal services, including advice, document drafting, and representation related to commercial and corporate matters.
  • To communicate with clients about case progress, deadlines, required documents, and administrative matters.
  • To perform identity verification and anti-fraud checks required by professional rules and applicable law.
  • To process invoices, payments, and manage business records related to engagements.
  • To improve services, analyze trends, and tailor resources to common entrepreneur needs.
  • To send service-related notices and, where consent is given, marketing communications that may benefit your business.
  • To protect the security and integrity of our systems and detect misuse or unauthorized access.
  • To comply with legal obligations, court orders, or regulatory requests.
07

Legal Basis for Processing

When processing personal data we identify an appropriate legal basis under applicable law. For many client interactions, the basis is performance of a contract or compliance with legal obligations. In other cases we rely on legitimate interests or consent where appropriate.

  • Performance of a contract: processing necessary to provide legal services requested by a client.
  • Compliance with legal obligations: processing required by laws, regulations, or professional rules.
  • Legitimate interests: processing that supports core business operations, security, and fraud prevention, balanced against individual rights.
  • Consent: for marketing communications and certain optional services where explicit consent is obtained.
08

Cookies and Similar Technologies

nunirixo.info uses cookies and similar technologies to enable core functionality, analyze site performance, and personalize content. You can manage cookie preferences through your browser or site controls.

We use session cookies for functionality, persistent cookies for preferences, and third-party cookies for analytics and optional features such as embedded content.

Categories include strictly necessary cookies, performance/analytics cookies, and functional cookies used to remember preferences. Marketing cookies are used only if you opt in.

You can disable or remove cookies via your browser settings, but certain site features may not operate correctly if strictly necessary cookies are blocked. Visit the cookie settings on nunirixo.info to adjust preferences.

Full Cookie Policy

09

How We Share Data

We limit data sharing to entities necessary to provide, support, or comply with legal obligations associated with our services. All external parties are contractually bound to protect data and use it only for permitted purposes.

  • External legal professionals and consultants engaged to handle specific client matters under confidentiality agreements.
  • Payment processors and banks for invoice settlement and fraud prevention.
  • Regulatory bodies, courts, or law enforcement when required by law or to establish legal claims and defenses.
  • Technology and service providers who host data, run analytics, or provide client relationship tools under data processing agreements.
  • Public authorities and registries when verifying business credentials or fulfilling filing obligations.
  • Prospective buyers or advisors in the context of a business sale or corporate transaction, subject to confidentiality safeguards.
10

International Transfers

Because we operate and use third-party services across borders, personal data may be transferred outside Thailand. When transfers occur, we apply appropriate safeguards such as contractual protections and only transfer data where recipients meet minimum security and legal standards.

Transfers are governed by contractual clauses, careful vendor selection, and technical measures where required. We seek to ensure that overseas recipients provide equivalent levels of protection and process data only for the purposes we specify.

11

Retention and Deletion

We retain personal data only as long as necessary to provide services, to meet legal and regulatory retention requirements, and to resolve disputes or enforce agreements.

Client account records and engagement files are retained for the period required by professional rules and tax regulations. This typically means key documentation is kept for a period consistent with statutory obligations and professional standards.

Communications and case-related correspondence are retained as necessary for the duration of an engagement and for a reasonable period afterward to address follow-up matters or to comply with legal requirements, commonly up to several years depending on the matter and local rules.

Technical logs and system records used for security, troubleshooting, and analytics are retained for a limited period to balance operational needs and privacy considerations.

When personal data is no longer required, we will securely delete or anonymize it in accordance with our retention schedules unless retention is required for legal, regulatory, or legitimate business reasons. Requests for deletion are handled per the rights section below.

12

Security Practices

nunirixo implements organizational, physical, and technical measures to protect personal data from unauthorized access, disclosure, alteration, or loss. Security practices are reviewed periodically and updated as needed to address evolving risks while maintaining operational effectiveness.

  • Technical safeguards such as encryption for data in transit and at rest on systems that store client information.
  • Access controls and role-based permissions to limit staff access to only the data necessary for their duties.
  • Regular staff training, incident response planning, and vendor risk assessments to maintain a strong security posture.
13

Your Data Rights

Individuals have rights regarding their personal data. We provide mechanisms to exercise these rights and will respond to requests in line with applicable law and our professional obligations.

  • Right of access: request a copy of personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of data where there is no overriding legal reason to retain it.
  • Right to restriction: request limited processing in certain circumstances.
  • Right to object: object to processing based on legitimate interests or for direct marketing.
  • Right to data portability: request transfer of provided data in a structured, commonly used format where applicable.
  • Right to withdraw consent: where processing is based on consent, you can withdraw consent at any time without affecting processing prior to withdrawal.
  • Right to lodge a complaint with a competent supervisory authority if you consider your rights have been breached.
14

GDPR and Cross-Border Considerations

Although nunirixo primarily serves clients in Thailand, certain processing activities may fall within the scope of the European GDPR. Where applicable, we apply GDPR principles and provide the rights described above.

If EU or EEA residents engage our services or if processing relates to offering services into those jurisdictions, we will identify a lawful basis for processing and implement appropriate safeguards for cross-border data transfers in line with GDPR requirements.

  • We collect only data necessary to deliver legal services to entrepreneurs: contact details, company identifiers, contract records, and billing information. Data is processed to create tailored legal documents, register businesses, manage disputes, and comply with regulatory obligations applicable in Thailand.
  • Data subjects may request access, correction, deletion, portability, or restriction of processing. Requests can be submitted to our privacy team using the contact details below. We evaluate each request in accordance with applicable law and our internal procedures.
  • We retain personal data only as long as required for the specific service, statutory retention periods, or to resolve ongoing matters. After the retention period, data is securely deleted or anonymized. Retention periods may vary depending on case type and legal requirements.
  • Processing is based on contractual necessity, legitimate interests in providing and improving legal services, and compliance with legal obligations. When marketing consent is required, we rely on explicit opt-in and allow straightforward opt-out mechanisms.

If you believe your personal data is processed in violation of applicable law, you may file a complaint with the National Personal Data Protection Committee (Thailand) or submit a complaint to our data protection contact at nunirixo. Provide clear details of the concern and any supporting evidence to help us respond efficiently.

15

Exercising Your Data Rights

You have the right to access copies of personal data we hold about you, ask for corrections, request deletion where lawful, obtain a portable copy, or restrict processing. To make a request, send a written notice with your identity details and the specific request to our privacy team. We verify requests to protect privacy and security.

[email protected]

We aim to acknowledge requests within 7 business days and to respond substantively within 30 calendar days. Complex requests or those requiring third-party coordination may require additional time; if so, we will notify you with an estimated timeline.

16

Marketing Communications

With your consent, nunirixo may send updates about legal service packages, seminars, and relevant regulatory alerts for entrepreneurs in Thailand. Marketing messages are limited to content likely to support your business operations and legal compliance.

You may opt out of marketing at any time via the unsubscribe link in emails, by replying STOP to SMS messages, or by contacting our privacy team. Unsubscribing will not affect communications necessary for an active legal engagement or mandatory notices.

17

Children's Data

nunirixo does not target services to minors and does not intentionally collect personal data from children under 13. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete the information promptly.

18

Third-Party Links

Our site and communications may link to third-party resources. We are not responsible for the privacy practices or content of external sites. Review the privacy policies of any third parties before submitting personal information to them.

19

Changes to This Policy

We may update this privacy information to reflect legal, operational, or regulatory changes. Material changes will be posted on nunirixo.info with an updated effective date. Non-material updates may be implemented without individual notice but will be reflected on this page.

Contact for Privacy Matters

Contact our privacy team: nunirixo, 401, Klai Sub District, Amphoe Tha Sala District, Nakhon Si Thammarat Province 80160, Thailand. Phone: +66968162124. Business ID: 9049850468835. For privacy requests or questions, email the designated address listed on nunirixo.info/contact and reference your Business ID when relevant.

+66968162124

[email protected]

401, Klai Sub District, Amphoe Tha Sala District, Nakhon Si Thammarat Province 80160, Thailand