Privacy Notice · Thailand Personal Tax

1. Who we are

Thailand Personal Tax is a service operated by VB and Partners Co., Ltd. ("VB & Partners", "we", "us"), a company registered in Thailand under registration number 0105564466576, with its office at Ocean Tower 2, 14th Floor, Sukhumvit 19 Alley, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand. For the processing described in this notice, VB & Partners is the data controller under the Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

Contact for any privacy question or request: info@vbapartners.com (subject "Personal data"), or by post to the address above.

2. Personal data we collect

Identity and contact details: name, email, telephone, nationality, date of birth, address, passport or Thai identification number, Thai tax identification number.
Tax facts: days spent in Thailand, visa or immigration status, residence, family situation (spouse, children, parents) where relevant to allowances.
Financial and tax information: income, withholding tax certificates (50 Tawi), bank and remittance statements, foreign tax assessments, rental contracts, invoices and receipts, insurance and investment certificates, previous tax returns.
Revenue Department e-Filing credentials, where you give them to us so that we can file on your behalf.
Engagement records: accepted terms, power of attorney, approvals, electronic signatures, messages with our team, filing receipts.
Billing data: invoices, payments, VAT information. Card details are entered directly with Stripe and are never stored by us.
Technical data: sign-in records, security logs, and your language preference stored in your own browser.

Amounts you type into the public tax calculator are processed in your browser to show the estimate. They are not sent to us unless you start a tax matter and enter them in your client account.

We do not ask for sensitive data within the meaning of Section 26 PDPA (such as religion, health or criminal records). Some identity documents display such data (for example religion or blood type on a Thai identification card): please mask it before uploading. If sensitive data is nevertheless needed for a specific allowance (for example a disability allowance), we will ask for your explicit consent first.

3. Why we use your data and on what legal basis

To provide the service you request (tax review, preparation and filing of your return, Tax ID applications, related services): performance of a contract (Section 24(3) PDPA).
To file returns and communicate with the Revenue Department on your behalf under your power of attorney: performance of a contract.
To comply with our legal obligations (accounting, tax, invoicing and record-keeping requirements, requests from authorities): legal obligation (Section 24(6)).
To secure our systems, prevent fraud, keep an audit trail of actions on your file and improve the service: our legitimate interests (Section 24(5)), balanced against your rights.
To send you guides, newsletters or reminders that are not part of the service: your consent (Section 19), which you can withdraw at any time.

4. Who receives your data

Your data is accessible only to the VB & Partners staff working on your file, under confidentiality obligations. We share it with:

the Thai Revenue Department and other authorities, when filing on your behalf or when the law requires it;
service providers acting on our instructions under data processing agreements: secure hosting and storage, email delivery, electronic signature and our card payment provider (Stripe);
our professional advisers (auditors, lawyers) under professional secrecy, when necessary.

We never sell your personal data and never send your tax documents as ordinary email attachments.

5. Transfers outside Thailand

Our application and document storage are hosted with providers whose servers are located in Singapore (database and document storage) and, for website delivery and email sending, other regions used by our hosting and email providers. Such transfers are made only with the safeguards required by Sections 28 and 29 PDPA (adequate protection standards, contractual safeguards or another lawful basis).

6. How long we keep your data

Client documents and tax file data: 5 years after the filing of the return or the end of our engagement, whichever is later, after which they may be destroyed. This period covers the time during which the Revenue Department may review a return.
Revenue Department e-Filing credentials: deleted as soon as the filing receipt is stored in your account, or earlier at your request. We ask you to change your password after filing.
Invoices and accounting records of VB & Partners: for the period required by Thai accounting and tax law.
Guide and newsletter contacts: until you withdraw your consent or after 2 years without interaction.

7. Security

Documents are stored in private storage that is never publicly accessible, with time-limited access links. Access by our staff requires two-step authentication, is limited to the people working on your file and is logged. E-Filing credentials are encrypted with a separate key and can only be displayed by the assigned staff member, each display being recorded.

8. Your rights

Under the PDPA you may ask to access and obtain a copy of your data, receive it in a commonly used format or have it sent to another controller, correct it, object to or restrict its processing, have it deleted or anonymised where the law allows, and withdraw any consent you gave. Some requests may be limited where we must keep data to meet a legal obligation or to establish or defend legal claims. You may also complain to the Office of the Personal Data Protection Committee. To exercise your rights, write to info@vbapartners.com; we answer within the time limits set by law.

9. Cookies and browser storage

We use only what is needed to run the site and your account: your language preference stored in your browser and the cookies required to keep you signed in. We do not use advertising cookies. If we add audience measurement, we will ask for your consent first where required.

10. Minors

The service is intended for adults. A parent or legal representative may act for a minor taxpayer.

11. Changes to this notice

We may update this notice. The date at the top shows the latest version, and significant changes will be notified in your client account.