Privacy Policy

1. Introduction

Orionis ("we," "our," or "us") is committed to protecting the privacy and personal data of individuals who engage with our foreign investment advisory services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection regulations.

By using our website or engaging our advisory services, you acknowledge that you have read and understood this Privacy Policy. If you have questions about our data handling practices, please contact us at [email protected].

2. Data Collection

Personal Data We Collect

We collect the following categories of personal data:

• Contact Information: Name, email address, phone number, business address
• Business Information: Company name, position, industry sector, investment plans
• Communication Records: Correspondence, consultation notes, service requests
• Website Usage Data: IP address, browser type, pages visited, time spent on site
• Service Documentation: Business plans, financial information, corporate structure details as needed for advisory services

Methods of Collection

We collect personal data through:

• Contact forms and consultation request submissions on our website
• Email and telephone communications
• In-person consultations and meetings
• Documents and materials you provide for advisory services
• Website cookies and analytics tools (see Cookie Policy for details)

3. Legal Basis and Purpose of Processing

We process your personal data based on the following legal grounds:

• Consent: You provide explicit consent when submitting contact forms or requesting consultations
• Contract Performance: Processing necessary to deliver advisory services you have engaged
• Legitimate Interests: Business operations, service improvement, and communication about our advisory capabilities
• Legal Obligations: Compliance with Thai laws, tax regulations, and professional standards

Purposes of Data Use

Your personal data is used for:

• Providing BOI application support and regulatory compliance advisory services
• Responding to consultation requests and maintaining client communication
• Preparing documentation, business plans, and application materials
• Maintaining records as required by professional standards and legal obligations
• Improving our services and website functionality
• Sending service-related communications and updates about Thai investment regulations

4. Data Retention

We retain personal data for the following periods:

• Consultation Inquiries: 2 years from last contact if no service engagement
• Active Client Records: Duration of service engagement plus 7 years as required by Thai accounting and legal standards
• Marketing Communications: Until you withdraw consent or request removal
• Website Analytics: 26 months from collection

After retention periods expire, personal data is securely deleted or anonymized unless longer retention is required by law.

5. Data Sharing and Disclosure

We may share your personal data with:

• Board of Investment: As necessary for BOI promotion applications (with your consent)
• Government Authorities: When required by Thai law or regulatory obligations
• Professional Advisors: Legal counsel, accountants, or technical consultants supporting your engagement (under confidentiality obligations)
• Service Providers: IT infrastructure, email services, document management systems (under data processing agreements)

We do not sell, rent, or trade your personal data to third parties for marketing purposes. All data sharing is conducted with appropriate safeguards and in accordance with PDPA requirements.

6. Data Security

We implement technical and organizational measures to protect your personal data, including:

• Encryption of data transmission using SSL/TLS protocols
• Secure document storage systems with access controls
• Regular security assessments and updates to protection measures
• Staff training on data protection requirements and confidentiality obligations
• Physical security measures for office premises and document storage

While we maintain appropriate security measures, no system can guarantee complete security. We encourage you to protect your own account credentials and notify us immediately of any suspected unauthorized access.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience and analyze site usage. For detailed information about our cookie practices, including types of cookies used and how to manage your preferences, please review our Cookie Policy.

8. Your Rights Under PDPA

You have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your data for certain purposes
• Right to Restrict Processing: Request limitation of data processing in specific circumstances
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge Complaint: File complaint with the Thai Personal Data Protection Committee

To exercise these rights, contact us at [email protected]. We will respond to verified requests within 30 days as required by PDPA.

9. International Data Transfers

Your personal data is primarily stored and processed in Thailand. If data transfer outside Thailand becomes necessary for service delivery, we will implement appropriate safeguards such as standard contractual clauses or obtain your explicit consent as required by PDPA. You will be informed of any such transfers and the protection measures applied.

10. Children's Privacy

Our services are directed to business professionals and investors aged 20 years and above. We do not knowingly collect personal data from individuals under 20 years of age. If we become aware that we have collected data from someone under this age, we will delete it promptly.

11. Changes to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through website notice or email to active clients. The "Last Updated" date at the top of this policy indicates the most recent revision. We encourage you to review this policy periodically.

12. Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, contact: