General Information

Definitions

The following definitions explain terms used in this policy to help clarify what we mean by personal data, processing and related concepts.

Personal data means any information that relates to an identified or identifiable natural person, such as name, identification numbers, contact details, or other information used to identify an individual.

Processing means any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, or deletion.

User refers to any individual who uses coriomo services, visits coriomo.pro, books appointments, or otherwise interacts with our notarial services.

Service refers to notarial acts, document certification, identity verification, appointment scheduling, and any ancillary administrative services provided by coriomo.

Cookies are small data files placed on a device by a website to store preferences, session information or usage details to improve functionality and analytics.

Data Collection

We collect personal data necessary to provide notarial services, to meet legal obligations, and to maintain effective communication with users. Collected data is limited to what is relevant and proportionate for these purposes.

Purposes of Processing

We process personal data for specific, explicit and legitimate purposes related to providing notarial services and managing client relationships.

• To perform notarial acts and certify documents as requested by users.
• To verify identity and assess the authenticity of documents as required by law.
• To manage appointments, communicate with clients and provide customer support.
• To process payments and issue receipts or invoices.
• To comply with legal and regulatory obligations applicable to notarial services in Thailand.
• To maintain records necessary for audit, dispute resolution and compliance purposes.
• To monitor and improve website functionality and service delivery using aggregated analytics.
• To prevent fraud, misuse and unauthorized activities affecting our services.

Legal Bases for Processing

Processing of personal data is carried out on lawful grounds appropriate to each processing purpose under applicable law.

• Performance of a contract: processing necessary to provide requested notarial services and related obligations.
• Legal obligation: processing required to comply with statutory duties, court orders or regulatory requirements.
• Consent: where we rely on consent for specific processing activities, such consent may be withdrawn at any time without affecting prior processing.
• Legitimate interests: processing necessary for security, fraud prevention, and operational management where such interests are balanced against individual rights.

Cookies and Similar Technologies

We use cookies and similar technologies to enable core site functionality, to analyze site use and to support certain service features. You can control cookie preferences via your browser or device settings.

Common cookie types include session cookies, persistent cookies, authentication cookies and analytics cookies used to collect usage information.

Categories: essential cookies (site operation), functional cookies (preferences), analytics cookies (usage statistics) and advertising cookies (where applicable).

To manage cookies, adjust your browser settings to block or delete cookies, or use available preference controls on the site. Note that disabling certain cookies may affect site functionality.

Cookie Policy

Data Sharing and Disclosure

We share personal data only as necessary to deliver services, fulfill legal obligations, or with service providers acting on our behalf under confidentiality terms.

• Service providers and contractors who assist with payments, IT hosting, analytics and document handling.
• Government authorities, courts or law enforcement when required by law or legal process.
• Payment processors and banks to process fees and refunds.
• Couriers or logistics partners when physical document delivery is arranged.
• Professional advisors such as legal or accounting advisers for compliance and dispute resolution.
• Third parties when you provide explicit consent for specific disclosures.

International Transfers

Personal data may be transferred to service providers or partners located outside Thailand when necessary for service delivery. Transfers are limited to what is required and performed in accordance with applicable legal requirements.

When transferring data internationally, we apply safeguards such as contractual data protection provisions, selection of vendors that maintain adequate protections, and technical measures like encryption to reduce risk.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes set out in this policy, to satisfy legal or regulatory obligations, and to resolve disputes.

Account information and client records are retained for a period consistent with regulatory and professional requirements for notarial records, typically as required by Thai law or professional guidelines.

Communications, correspondence and appointment records are retained for a period necessary to address service matters and potential follow-up, subject to applicable retention requirements.

System logs, security and audit records are retained for operational and security purposes, typically for a limited period depending on system needs and legal obligations.

When personal data is no longer necessary, we will securely delete or anonymize it in accordance with internal procedures unless retention is required by law.

Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, disclosure or alteration. Security measures are reviewed periodically and adapted as necessary to reflect changes in technology and risk.

• Encryption of data in transit and where feasible in storage.
• Access controls, role-based permissions and authentication procedures for staff and systems.
• Regular security assessments, staff training and incident response planning.

User Rights

Subject to applicable law, users can exercise certain rights in relation to their personal data. Requests should be submitted using the contact details provided and will be processed within a reasonable timeframe.

• Right of access: request confirmation and a copy of personal data we hold.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of personal data where eligible under applicable law.
• Right to restriction of processing: request limitation of processing in certain circumstances.
• Right to object: object to processing based on legitimate interests or direct marketing where applicable.
• Right to data portability: request a machine-readable copy of personal data provided directly when applicable.
• Request restriction of processing when accuracy is contested or processing is unlawful but restriction is requested instead of erasure.
• Right to withdraw consent at any time for processing activities based on consent, without affecting the lawfulness of prior processing.

How to Exercise Your Data Rights

To exercise your rights regarding personal data held by coriomo, submit a written request specifying the right you wish to exercise and any relevant details to help locate the information. Valid requests should include a clear description and a copy of a photo ID when necessary to verify identity. Requests can be sent by post to our office address or via the contact form on coriomo.pro.

[email protected]

We will acknowledge receipt of a valid rights request within 10 business days. Where permitted by applicable law or necessary to verify identity, additional time may be required. We aim to provide a substantive response or action within 30 calendar days of verification.

Applicable Law and References

Where applicable, coriomo respects data subject rights under data protection frameworks such as the EU General Data Protection Regulation (GDPR). The following points outline common rights and how they are handled; applicability depends on jurisdiction and the nature of processing.

• Right of access: You may request confirmation whether personal data concerning you is being processed and obtain a copy of that data.
• Right to rectification: If personal data we hold about you is inaccurate or incomplete, you may request correction or completion.
• Right to erasure: In certain circumstances you may request deletion of your personal data where retention is not required by law.
• Right to restrict processing: You may request limitation of processing while a dispute about accuracy or lawfulness is being resolved.
• Right to data portability: Where technically feasible and applicable, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes; objections will be assessed in accordance with applicable law.

If you consider that coriomo has infringed your rights under applicable data protection law, you may lodge a complaint with an appropriate supervisory authority. For residents of the European Economic Area, this may include the authority competent in your member state.

Marketing Communications

coriomo may use contact details to send administrative updates and, where consent has been provided, occasional information about services that may be relevant to clients. Marketing communications will include a clear unsubscribe option and are limited to topics related to notarial services and office updates.

To stop receiving marketing communications, follow the unsubscribe link in an email or submit an unsubscribe request through the contact options on coriomo.pro. Processing of unsubscribe requests will commence promptly and will not affect the delivery of mandatory service notifications.

Children and Minors

coriomo does not knowingly collect or maintain personal data from children under the legal age for consent in their jurisdiction without parental or guardian authorization. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information as required by applicable law.

Third-Party Links and Services

This site may contain links to third-party websites and services. coriomo is not responsible for the privacy practices or content of those external sites. When you follow links to third-party services, review their privacy notices as their data handling practices may differ.