How we handle personal data
realeio collects only the personal data necessary to perform notarial acts and related administrative tasks. Typical data elements include identity document details, contact information and records of the notarial act. Data is retained in accordance with legal requirements and professional recordkeeping standards. Access to personal data is limited to staff involved in the notarial process and to third parties only when required by law or with the client’s informed instruction for specific service steps. Clients may request access to their records or corrections through the contact channels provided.
Key definitions
This section explains terms used in this privacy statement to make it easier to understand what personal data we process, how we process it and why. The definitions apply to the entire privacy information provided by realeio for notarial services.
What data we collect
realeio collects data that is necessary to provide notarial services and to comply with applicable legal and regulatory obligations. We distinguish between data you provide directly, data collected automatically and data obtained from third parties with your consent or as required for service delivery.
Data you provide directly
When you engage with realeio or use the website, you may provide personal data required to carry out notarial tasks, communicate with you, or comply with verification requirements. Examples are listed below.
- Identity details: full name, date of birth, nationality, and government-issued identification numbers when required for notarisation.
- Contact details: email address, postal address, and telephone number for appointment scheduling and official communications.
- Document copies and signatures: copies of documents presented for notarial certification, scanned signatures, and any supporting affidavits or declarations.
- Account information: registration details, username, and access credentials when you create an account on realeio.pro.
- Payment and billing information: limited details necessary to process payments when relevant, provided through secure third-party payment processors.
- Communications content: messages you send to realeio, including requests, instructions and any files attached to those messages.
Data collected automatically
When you visit realeio.pro or interact with our online services, certain technical data are collected automatically to operate and secure the site, and to monitor and improve service delivery.
- Technical identifiers: IP address, device identifiers, browser type and version, and operating system.
- Usage data: pages visited, time spent on pages, navigational paths and clicks for site performance and analytics.
- Session data: cookies and session vouchers used to maintain authentication and preferences during a visit.
- Security logs: records of access attempts and system events to detect and contribute potential security incidents.
- Geolocation: coarse location derived from IP address where necessary for service eligibility or security checks.
- Error reports and diagnostics sent automatically by the website or browser when malfunctions occur.
Data obtained from third parties
realeio may receive personal data from service providers, public authorities, or other third parties to the extent necessary to provide notarial services or to comply with legal obligations.
- Identity verification providers: third-party services used to confirm identity or validate documents.
- Payment processors: limited billing details provided by payment service providers when payments are processed.
- Public registers and authorities: information obtained from public records or government agencies as required by law.
Why we process personal data
realeio processes personal data for specific, explicit and legitimate purposes related to notarial practice, compliance with legal obligations, and the operation and improvement of our online services.
- Provision of notarial services: to review, certify and notarise documents and to complete required administrative steps.
- Identity verification: to verify client identity in accordance with legal and regulatory requirements for notarial acts.
- Communication: to respond to enquiries, schedule appointments, and provide information about services and procedural updates.
- Legal compliance: to comply with anti-funds laundering rules, record-keeping obligations, tax or other regulatory requirements applicable to notaries in Thailand.
- Security and fraud prevention: to detect and prevent unlawful use, fraud, and other security incidents affecting the service.
- Service improvement and analytics: to analyse usage patterns and improve website functionality and client experience.
- Record-keeping: to retain notarised documents and transaction logs for periods required by law or professional standards.
- Dispute resolution and legal defense: to establish, exercise or defend legal claims when necessary.
Legal bases for processing
Processing carried out by realeio is based on legal grounds appropriate to each purpose. We only process data when a lawful basis applies under applicable privacy laws.
- Performance of a contract: processing necessary to perform services you requested, such as notarisation and related administrative tasks.
- Legal obligation: processing required to comply with statutory obligations, including record-keeping and anti-funds laundering duties.
- Legitimate interests: processing necessary for the proper operation, security and improvement of services, balanced against individuals' rights and freedoms.
- Consent: where optional processing (for example certain marketing communications or cookies beyond strictly necessary ones) is based on your explicit consent.
GDPR and rights of data subjects
For individuals covered by EU data protection law, many of the rights provided under the General Data Protection Regulation (GDPR) may apply when external factors render it applicable. This section summarises those rights and how to exercise them with realeio.
- Right of access: you may request confirmation whether we process your personal data and request a copy of the data we hold about you.
- Right to rectification: you can ask us to correct inaccurate or incomplete personal data relating to you.
- Right to erasure: under certain conditions you may request deletion of data that is no longer necessary or where processing is unlawful.
- Right to restriction of processing: you may ask for processing to be limited while a dispute about accuracy or lawfulness is resolved.
- Right to data portability: where processing is based on consent or contract and is carried out by automated means, you can request a machine-readable copy of your data.
- Right to object: you can object to processing based on legitimate interests or direct marketing; we will consider and respond in line with applicable law.
Sharing of personal data
realeio shares personal data only when necessary to deliver services, to comply with legal obligations, or with trusted third-party processors that provide services under contract and confidentiality terms.
- Service providers: cloud hosting, IT and security providers, and appointment scheduling systems that process data on our behalf.
- Verification and payment partners: identity verification providers and payment processors limited to the data needed to perform their functions.
- Regulators and authorities: when disclosure is required by law, court order or to comply with regulatory obligations.
- Professional advisors: legal or accounting advisors assisting realeio in a confidential capacity.
- Receivers of notarised documents: third parties explicitly authorised by you to receive certified documents.
- Aggregated or anonymised data: statistical information that no longer identifies individuals may be shared for analytics or research.
International data transfers
Personal data processed by realeio may be transferred to or accessed from countries outside your home jurisdiction for operational reasons, for example where service providers host data on servers abroad.
Where transfers occur, realeio implements appropriate safeguards such as contractual data processing agreements, selection of processors that apply recognised security standards, and technical protections like encryption to protect personal data.
Data retention
realeio retains personal data for the period necessary to fulfil the purposes described, to meet legal or regulatory retention obligations, and to resolve disputes or comply with statutory record-keeping requirements.
Account and client records are retained for periods required by professional practice rules and applicable Thai law; where not required by law, we retain only for the time necessary to manage the client relationship.
Communications and correspondence are kept for the lifecycle of the relevant matter and for a reasonable period afterward to address follow-up questions or liability issues.
System and security logs are retained for a limited period for troubleshooting and incident contribute, according to internal retention schedules aligned with security needs.
When retention periods expire or data is no longer required, data is securely deleted or anonymised in accordance with internal procedures and applicable law.
Security of personal data
realeio applies administrative, technical and physical measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Security practices are reviewed regularly and updated as needed.
- Access controls and role-based permissions to restrict access to personal data to authorised staff only.
- Encryption of data in transit and at rest for systems holding sensitive information and document storage.
- Regular monitoring, security audits, vulnerability assessments and incident response procedures to detect and address security issues.
Your data protection rights
Subject to applicable law, you may exercise the rights below regarding personal data processed by realeio. We explain how to make requests and what to expect in our response.
- Access: request confirmation whether we process your data and obtain a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete personal data.
- Erasure: request deletion of your data where retention is no longer necessary or processing lacks lawful basis.
- Restriction: request limiting processing where accuracy or legality is contested.
- Portability: request a structured, machine-readable copy of data where applicable.
- Object: object to processing based on legitimate interests or to direct marketing.
- Withdraw consent: where processing is based on consent, you may withdraw consent without affecting processing prior to withdrawal.
- Lodge a complaint: if you consider your rights under applicable law have not been respected, you may lodge a complaint with a relevant supervisory authority.
How to make a rights request
To exercise your rights or ask questions about privacy, contact realeio using the contact details below. Provide sufficient information to allow us to verify your identity and specify the request type and the data involved. We may ask for additional information to process your request and to prevent fraudulent requests.
We aim to respond to valid requests promptly and in accordance with applicable legal deadlines. In some cases, additional time may be required to verify identity or to consider complex requests; if so, we will inform you of any lawful extension and the reasons.
Marketing Communications
realeio may send informational messages about services, procedural updates, and changes to policies that relate to notarial services. Communications may include email, SMS, and postal notices where contact details are provided. Messages are intended to keep clients informed about appointments, document status, legal notices, and other operational matters relevant to the provision of notarial services in Thailand.
To stop receiving marketing or informational messages, contact our office by email or phone, or follow the unsubscribe link included in email communications. Processing of unsubscribe requests may take up to 10 business days to take full effect for all channels.
Children and Minors
realeio does not knowingly collect personal data from children under the age of legal majority for contracts or notarial acts without appropriate parental or guardian consent. If we become aware that personal data from a minor was collected without required authorization, we will take steps to remove such data in accordance with local law.
Third-Party Links
Our website may contain links to third-party sites for services such as payment processors, government portals, or legal resource pages. These linked sites have separate privacy practices. realeio is not responsible for the content or privacy practices of external sites; users are encouraged to review third-party privacy policies before providing personal information.
Changes to This Privacy Notice
This privacy notice may be updated to reflect changes in our practices, legal requirements, or operational needs. Material changes will be published on realeio.pro with the effective date. Continued use of our services after changes are posted indicates acceptance of the updated terms.
Contact Information
For questions about privacy practices, data requests, or to exercise rights concerning your personal data, contact: realeio, Thanon Phet Kasem, Bangkok District, Bangkok 10160, Thailand. Email: [email protected]. Phone: +66999383237. Business ID: 4295276121304.
- +66999383237
- [email protected]
- Thanon Phet Kasem, Bangkok District, Bangkok 10160, Thailand