Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Thai Insurance & Escrow Alliance ("we", "us") collects, uses, and protects personal data in the course of providing insurance, escrow, verification, and risk-advisory services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

We collect information you provide directly — such as your name, contact details, company information, and identity documents required for KYC and verification — as well as information generated during an engagement, such as transaction records, verification findings, and correspondence.

We also collect limited technical data (such as device and usage information) necessary to operate and secure this website.

2. How We Use Your Information

We use personal data to provide and improve our services, administer escrow transactions, conduct verifications, place insurance, comply with legal and regulatory obligations (including AML and sanctions screening), communicate with you, and prevent fraud.

We do not use personal data for purposes incompatible with the engagement for which it was collected.

3. Legal Bases for Processing

We process personal data on the basis of contract performance, legal obligation, legitimate interest (such as fraud prevention and service security), and — where required — your consent. You may withdraw consent at any time without affecting prior processing.

4. Data Protection & Security

We implement bank-grade technical and organizational measures, including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and full audit trails. Access to personal data is limited to personnel who need it for a defined purpose.

5. Data Sharing

We do not sell personal data. We share information only with regulated partners (such as underwriters, banks, and inspection partners) where necessary to deliver a requested service, or where required by law, regulation, or court order.

6. International Transfers

Because our services are international, personal data may be transferred across borders. Where we transfer data outside its jurisdiction of origin, we apply appropriate safeguards consistent with GDPR and PDPA requirements.

7. Retention

We retain personal data only as long as necessary for the purposes for which it was collected and to satisfy legal, regulatory, and record-keeping obligations. When no longer required, data is securely deleted or anonymized.

8. Your Rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. To exercise these rights, contact our Data Protection Officer at privacy@thaiinsurances.com. We respond within the timeframes required by law.

9. Cookies

This website uses a small number of cookies essential to its operation. See our Cookie Policy for details.

10. Contact

For privacy questions or requests, contact: privacy@thaiinsurances.com.