Privacy Policy

Information We Collect

We collect personal information that you voluntarily provide to us when you:

• Submit an enquiry through our contact form
• Enter into a service agreement with BizStep
• Correspond with us by email or other means
• Use our services as a client

The information we may collect includes your name, email address, phone number, company name, company registration details and any other information you choose to share with us in the course of our service relationship.

We also collect certain technical data automatically when you visit our website, including your IP address, browser type and version, pages visited and the time and date of your visit. This data is collected for analytical purposes only and is not linked to your personal identity.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, manage and improve our accounting, tax and payroll services
• To communicate with you regarding your enquiries and service requests
• To issue invoices, receipts and financial documentation
• To respond to enquiries submitted through our contact form
• To analyse website usage and improve user experience

We will not sell, rent or share your personal information with third parties for marketing purposes.

Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and analyse website traffic. We use the following types of cookies:

• Essential cookies: Necessary for the website to function correctly.
• Analytics cookies: Help us understand how visitors interact with our website (e.g. pages visited, time spent). Data is aggregated and anonymised.

You may disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the website.

Third-Party Services

In the course of providing our services, we may share relevant information with trusted third parties strictly to the extent necessary to deliver those services. These include:

• Xero: Our cloud accounting platform, used to record and manage your financial data
• Thai government authorities: Including the Revenue Department, the Department of Business Development, and the Social Security Office
• Statutory auditors: Where applicable, for the preparation and submission of audited financial statements

Each of these third parties is bound by their own privacy policies and applicable data protection obligations. We do not authorise them to use your personal information for any purpose other than the services they provide to us.

External Links

Our website may contain links to external websites. Once you leave our website, this Privacy Policy no longer applies. We strongly recommend reviewing the privacy policies of any third-party websites you visit. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party sites.

Data Security

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, disclosure or alteration. These measures include:

• Secure, encrypted data storage
• Access controls limiting who can view client data within our organisation
• Use of reputable, industry-standard platforms (including Xero) with their own robust security measures

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to responding promptly to any breach that may occur.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy and to comply with our legal obligations under Thai law.

Upon termination of our service relationship, we will securely delete or anonymise your personal data within a reasonable period, except where retention is required by law.

Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data, subject to our legal retention obligations
• Object to or restrict the processing of your personal data in certain circumstances

To exercise any of these rights, please contact us directly. We will respond to your request within a reasonable timeframe.

Changes to this Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Continued use of our website or services following any changes constitutes your acceptance of the revised policy.