Privacy Policy

Last Updated: 15 October 2026

At KK Advisory Thailand ("KK Advisory", "KK Consulting", "we", "us" or "our"), we respect your privacy and are committed to protecting the personal and business information entrusted to us.

This Privacy Policy explains how we collect, use, store, protect and disclose information when you visit kkadvisorythailand.com, contact us, request a consultation, or use our accounting, taxation, audit, company registration and business advisory services.

We aim to handle personal data responsibly and in accordance with applicable Thai laws, including the Personal Data Protection Act B.E. 2562 (2019), commonly known as the PDPA, where applicable.

1. Information We Collect

Depending on your interaction with us, we may collect the following information.

Personal Information

• Full name and job title.
• Email address and telephone number.
• Business address and contact details.
• Company name and professional information.
• Information submitted through consultation forms, email, WhatsApp, LINE or other communication channels.

Financial and Accounting Information

• Accounting records, invoices and transaction histories.
• Bank statements and relevant financial information.
• VAT filings, withholding-tax records and corporate tax information.
• Payroll, employee-related and social security information where required.
• Financial statements, audit documentation and supporting records.

Business and Corporate Information

• Company registration and corporate ownership information.
• Business licences, permits and regulatory documents.
• Information relating to foreign business operations and investment structures.
• Documents required for tax compliance, audit preparation and regulatory reporting.

Website and Technical Information

• IP address and general location information.
• Browser type, device type and operating system.
• Pages visited, referral sources and website interaction data.
• Cookies and similar technologies, where enabled.

2. How We Use Your Information

We may use your information for the following purposes:

• Responding to enquiries and consultation requests.
• Providing bookkeeping, accounting and financial reporting services.
• Preparing and supporting VAT, withholding-tax and corporate income-tax filings.
• Delivering tax advisory, tax planning and compliance support.
• Supporting internal audits, audit readiness and financial reviews.
• Assisting with company registration, business setup, licensing and regulatory procedures.
• Managing client relationships, service agreements, invoices and payments.
• Communicating service updates, deadlines and compliance reminders.
• Maintaining records and meeting legal and regulatory obligations.
• Protecting our website, systems, clients and business operations.
• Improving our website, services and client experience.
• Sending relevant business communications or marketing materials where permitted by law.

3. Legal Basis for Processing

Where required under applicable data protection law, we process personal data on one or more lawful grounds, including:

• Consent: Where you have given valid consent for a specific purpose.
• Contractual necessity: Where processing is necessary to provide requested services or take steps before entering into a contract.
• Legal obligations: Where processing is necessary to comply with applicable legal or regulatory requirements.
• Legitimate interests: Where processing is necessary for legitimate business purposes and does not override applicable individual rights.
• Other lawful grounds: Where processing is permitted under applicable law.

Where we rely on consent, you may withdraw it subject to applicable legal requirements. Withdrawal does not affect processing lawfully carried out before withdrawal.

4. Confidentiality and Protection of Information

We understand that accounting, tax and corporate advisory services involve confidential information. We take reasonable technical, organisational and procedural measures designed to protect personal and business information against unauthorised access, disclosure, alteration, loss or destruction.

These measures may include:

• Restricting access to information to authorised personnel.
• Using appropriate security controls for digital records and business systems.
• Maintaining confidentiality procedures for client documents.
• Using suitable safeguards when sharing information with authorised service providers.
• Reviewing information-handling practices as appropriate.

Although we take reasonable steps to protect information, no website, electronic transmission or storage system can be guaranteed to be completely secure. Clients should use appropriate secure channels when sharing confidential financial or personal records.

5. Disclosure of Information

We do not sell personal information to third parties.

We may disclose information where reasonably necessary to:

• Professional advisers and service providers: Including auditors, legal advisers, accountants, IT providers, cloud-storage providers and authorised contractors.
• Government and regulatory authorities: Including relevant Thai tax, corporate registration, licensing and regulatory authorities where necessary.
• Banks and payment providers: Where required to process authorised transactions or provide relevant services.
• Business representatives: Such as directors, employees or authorised representatives of a client company, where appropriate.
• Other parties: Where you have authorised disclosure or where disclosure is otherwise permitted or required by applicable law.

Where appropriate, we take reasonable steps to ensure that third-party service providers handle personal data securely and in accordance with applicable obligations.

6. International Data Transfers

Some clients, business partners or service providers may operate outside Thailand. Personal data may therefore need to be transferred to or accessed from another country when providing services or using third-party technology platforms.

Where personal data is transferred internationally, we will take steps required by applicable law, including applicable PDPA requirements concerning cross-border transfers and appropriate safeguards.

7. Data Retention

We retain personal and business information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing and administering agreed services.
• Maintaining accounting, tax and corporate records.
• Meeting applicable legal, regulatory and professional obligations.
• Resolving disputes and enforcing contractual rights.
• Maintaining appropriate business and financial records.

Certain accounting, tax and corporate records may need to be retained for statutory periods even after a client relationship ends. When information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal requirements and legitimate retention needs.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to support website functionality, remember preferences, understand website traffic and improve user experience.

Depending on the tools implemented on the website, these technologies may collect technical information about your device and browsing activity.

You may be able to manage cookies through your browser settings or through a cookie preference tool, where available. Disabling certain cookies may affect website functionality. Where consent is required for non-essential cookies or tracking technologies, we will seek consent as required by applicable law.

9. Your Data Protection Rights

Subject to applicable law and any relevant exceptions, you may have the right to:

• Access: Request access to your personal data and obtain a copy.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure: Request deletion or destruction of personal data in circumstances provided by law.
• Restriction: Request restriction or suspension of certain processing activities.
• Objection: Object to certain processing activities where the law provides this right.
• Data portability: Request eligible personal data in a usable format or its transfer to another data controller, where applicable.
• Withdraw consent: Withdraw previously given consent where processing is based on consent.
• Lodge a complaint: Submit a complaint to the relevant authority where you believe your data protection rights have been infringed.

To exercise your rights, please contact us using the details below. We may need to verify your identity or authority before processing a request. Some requests may be restricted where retention or processing is required or permitted by law.

10. Third-Party Websites and Communication Platforms

Our website may contain links to third-party websites or services, including WhatsApp, LINE and other communication platforms. Their own privacy policies and terms may apply when you access these services.

We do not control the privacy practices or security of third-party platforms. Please review the relevant third party's privacy information before submitting personal or confidential information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, information-handling practices or applicable legal requirements.

Any revised version will be published on this page with an updated "Last Updated" date. Where required by law, we will provide additional notice or obtain consent for relevant changes. We encourage you to review this page periodically.

12. Contact Us