01 · Who we are
Thai Visa Pro is the data controller for personal data processed in connection with our website and our application-preparation services. Our ICO registration number is ZB914432.
For the purposes of UK GDPR and the Data Protection Act 2018, references to "we", "us" and "our" mean Thai Visa Pro. References to "you" mean any individual whose personal data we process — including applicants, dependants named in an application, individuals who contact us about our service, and visitors to our website who do not proceed to an application.
02 · What data we collect
The personal data we collect falls into three categories. The first is account and contact data — name, email address, telephone number, country of residence and the password you use to access your client area. The second is application data — passport scans, photographs, bank statements, employer letters, course acceptance letters, hospital confirmations, marriage and birth certificates, and any other document submitted in support of a DTV application.
The third is technical and usage data — IP address, device and browser type, pages viewed, the source you arrived from, and analytics events generated by your interaction with our site. We do not knowingly collect data from any individual under the age of sixteen, save for minors named as dependants on an application submitted by a parent or guardian.
03 · Why we collect it
We collect personal data only where there is a clear purpose. Account and application data are collected so we can prepare your DTV file to consulate standards, communicate with you about it, and maintain a record of work done. Technical data is collected to keep the website secure, diagnose errors, and understand which pages help applicants most.
We do not sell personal data. We do not share it with advertisers. We do not use application data for marketing. Where we send marketing emails — for example, an occasional update to past applicants about DTV rule changes — we do so only on the basis of consent, and you can withdraw that consent at any time using the unsubscribe link in any such email.
04 · Lawful basis under UK GDPR
We rely on four lawful bases for processing under Article 6 of the UK GDPR. Contract covers most application work — processing your data is necessary to perform the application-preparation contract you have entered into with us. Legal obligation covers our retention of records for tax, anti-money-laundering and consumer-rights purposes.
Legitimate interests covers a narrow set of activities including site security, fraud prevention and aggregated analytics — we have completed a Legitimate Interests Assessment for each, available on request. Consent covers any direct marketing communications and any non-essential cookies. Where we process special-category data — for example, health information in a Medical pathway file — we do so only with your explicit consent under Article 9.
05 · Sharing with third parties
We share personal data with three categories of third party. The first is the relevant Royal Thai Embassy or consulate, or the official Thai e-visa portal — to whom we submit your application on your instruction. The second is a small list of carefully selected processors who help us run the service, including our cloud hosting provider, document storage provider, email service provider and accounting software provider. Each is bound by a written data-processing agreement.
The third is our professional advisers — lawyers, accountants and auditors — where there is a specific reason to consult them on a matter involving your data. We do not share data with any other third party except where required by law (for example, in response to a court order) or where you have specifically asked us to (for example, to share a file with your migration lawyer).
06 · International transfers
Because we submit DTV applications to the Royal Thai mission that covers your citizenship or legal residence, your personal data will leave the United Kingdom and be transferred to Thailand or to whichever country hosts that mission. Since 31 August 2026 that mission is fixed by your nationality and residence rather than chosen. Thailand has not been the subject of a UK adequacy decision, so we rely on the UK International Data Transfer Agreement and the supplementary measures set out in our Transfer Risk Assessment.
Some of our processors operate outside the UK, including in the European Economic Area, the United States and Singapore. EEA transfers are covered by the UK extension to the EU Standard Contractual Clauses. US and Singapore transfers are covered by the UK International Data Transfer Agreement. Copies of the relevant transfer mechanisms are available on request.
07 · Retention
We hold application data for six years from the date your DTV application is submitted to the consulate, after which it is securely deleted. Six years matches the limitation period for contract claims under English law and our anti-money-laundering record-keeping obligation. We hold account and contact data for as long as your account remains active, and for a further two years thereafter.
We hold marketing consent records for six years after consent is withdrawn — a period set by the Information Commissioner's Office to evidence the basis on which past communications were sent. Aggregated and anonymised data may be retained indefinitely; once anonymised it is no longer personal data.
08 · Your rights
Under UK GDPR you have the right to be informed about how your data is processed, the right of access to a copy of the data we hold, the right to rectification of inaccurate data, the right to erasure where there is no continuing reason to hold it, the right to restrict processing, the right to data portability, the right to object to processing on legitimate-interests grounds, and the right not to be subject to wholly automated decision-making.
To exercise any of these rights, please contact our data protection contact using the details below. We aim to respond within ten working days and will respond fully within one calendar month, in line with the statutory limit. There is no fee for a first request. You also have the right to complain to the Information Commissioner's Office at any time, at ico.org.uk.
09 · Cookies
We use a small number of cookies. Strictly necessary cookies keep you signed in and remember your cookie choice — these are set without consent because the site cannot function without them. Analytics cookies, which help us understand which pages help applicants most, are set only after you accept them on our cookie banner. We do not use advertising cookies and we do not allow third-party tracking pixels on our site.
You can withdraw consent for analytics cookies at any time by clicking the cookie preferences link in the website footer, or by clearing cookies in your browser. A full list of cookies we set, including their purpose and lifetime, is available on the cookie preferences page.
10 · Contact for data requests
If you have a question about this policy, want to exercise a data-subject right, or wish to make a complaint about how we process your data, please contact our data protection contact: Sasha Greenwood, Data Protection Contact, Thai Visa Pro. By email: [email protected].
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office at ico.org.uk, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.