Privacy Policy

Last updated: 2026-07-03

1. Controller

Retirement Visa Phuket
29, 46 Wiset Rd, Rawai, Mueang Phuket District, Phuket 83100, Thailand
Email: office@retirementvisaphuket.com
Phone: +66 94 616 8513

2. Data we collect

  • Form data — name, email, WhatsApp/phone, nationality, visa situation that you voluntarily submit.
  • Server logs — IP address, browser, referrer, requested URL, timestamp (hosting provider Hostinger International Ltd., stored up to 14 days for security).
  • Cookies and similar technologies — only after explicit consent (see section 5).

3. Legal basis

  • Art. 6(1)(b) GDPR — pre-contractual measures (your visa pre-check request).
  • Art. 6(1)(a) GDPR — consent (analytics, marketing pixels).
  • Art. 6(1)(f) GDPR — legitimate interest (site security, fraud prevention).

4. Hosting

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. A Data Processing Agreement is in place (Art. 28 GDPR). Server location: EU.

5. Cookies, tracking and third-country transfer

We use the following services only after you click "Accept all" in our cookie banner. Until then, no tracking is loaded and no data is sent.

5.1 Meta Pixel + Conversions API (CAPI)

  • Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
  • Purpose: measure ad performance, build custom audiences, conversion tracking.
  • Data: hashed email/phone (SHA-256), IP address, user agent, event ID, page URL, browser interactions.
  • Retention: up to 2 years (Meta default).
  • Third-country transfer: Meta Platforms Inc., USA. Safeguards: EU-US Data Privacy Framework (Meta is certified) and Standard Contractual Clauses (Art. 46 GDPR).
  • Withdrawal: Cookie settings link (footer) → Essential only.
  • Meta Privacy Policy: facebook.com/privacy/policy

5.2 Google Analytics 4 (incl. Measurement Protocol)

  • Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
  • Purpose: traffic analysis, conversion measurement.
  • Data: anonymised IP (anonymize_ip enabled), client ID, page interactions, device, language, referrer, event ID.
  • Retention: 14 months (configured in GA4 settings).
  • Third-country transfer: Google LLC, USA. Safeguards: EU-US Data Privacy Framework (Google is certified) and Standard Contractual Clauses.
  • Google Privacy Policy: policies.google.com/privacy

5.3 Google Tag Manager (optional)

  • Provider: Google Ireland Ltd. / Google LLC, USA.
  • Purpose: container loader for tags above. GTM itself does not collect personal data, but loaded tags do (see 5.2).
  • Safeguards: as in 5.2.

5.4 Google Ads (optional)

  • Provider: Google Ireland Ltd. — conversion tracking and remarketing.
  • Retention: up to 540 days (cookie lifetime).
  • Third-country transfer: Google LLC, USA — same safeguards as 5.2.

5.5 TikTok Pixel (optional)

  • Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland (EEA users).
  • Purpose: ad performance and conversion measurement.
  • Retention: up to 13 months.
  • Third-country transfer: TikTok Inc., USA and ByteDance Ltd., Singapore/China. Safeguards: Standard Contractual Clauses + supplementary measures. Note: transfer to China carries elevated risk — no adequacy decision exists.
  • TikTok Privacy Policy: tiktok.com/legal/privacy-policy-eea

5.6 LinkedIn Insight Tag (optional)

  • Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
  • Retention: up to 180 days.
  • Third-country transfer: LinkedIn Corporation, USA. Safeguards: EU-US Data Privacy Framework, Standard Contractual Clauses.

6. Form processing & lead transmission

When you submit our contact form we send a notification email via Hostinger SMTP servers (EU). If you have given tracking consent, a server-side Lead event (with hashed identifiers) is additionally sent to Meta CAPI and Google Analytics Measurement Protocol — same providers and safeguards as in 5.1 and 5.2. Without consent, only the email notification is sent.

7. WhatsApp / Telegram

If you contact us via WhatsApp (WhatsApp Ireland Ltd., parent: Meta Platforms Inc., USA) or Telegram (Telegram FZ-LLC, UAE), the messaging metadata is processed by those providers under their own privacy policies. We only see messages you actively send.

8. Retention

  • Form submissions / email: deleted 24 months after last contact, unless a service contract is in force (then 10 years under Thai/EU tax law where applicable).
  • Server logs: 14 days.
  • Cookies / pixels: see individual retention periods above.

9. Your rights (Art. 15–22 GDPR)

  • Right of access to your data.
  • Right of rectification of inaccurate data.
  • Right of erasure ("right to be forgotten").
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time via the Cookie settings link in the footer.
  • Right to lodge a complaint with a supervisory authority (e.g. for EU residents: the data protection authority of your member state).

To exercise your rights, email office@retirementvisaphuket.com.

10. Children

Our services target adults aged 50 and above. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this policy when legal or technical requirements change. The "Last updated" date at the top reflects the most recent revision.