Privacy policy
This policy explains what personal data DealFlow collects, why we collect it, how we use it, who we share it with, and the rights you have over your data.
Last updated : July 27th, 2026
Who is responsible for your personal data
The data controller is responsible for collecting and processing your personal data in accordance with applicable privacy and data protection laws.
What personal data we collect
We collect the information necessary to provide our services and operate the DealFlow platform. This may include information you provide directly, information about your business, technical information about how you use our website, and communications you have with us.
Why we use it, and our lawful basis
We use personal data to provide and improve our services, communicate with you, operate our platform, protect our business, comply with legal obligations, and pursue legitimate business interests where permitted by law.
Sensitive personal data
We do not generally seek to collect sensitive personal data. If sensitive information is provided to us, we will handle it only where necessary and in accordance with applicable privacy laws.
Transfers outside Thailand
Some of our service providers or business partners may process personal data outside Thailand. Where this occurs, we take appropriate steps to ensure that your personal data receives an appropriate level of protection.
How long we keep it
We retain personal data only for as long as necessary for the purposes for which it was collected, including to provide our services, maintain business records, resolve disputes, comply with legal obligations, and enforce our agreements.
How we protect it
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
Your rights under the PDPA
Subject to applicable conditions, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, withdraw consent, request data portability, and exercise other rights available under applicable privacy laws.
How to exercise a right
If you wish to exercise your privacy rights, you can contact us using the contact details provided in this policy. We may need to verify your identity before processing your request.
Marketing
We may send you marketing communications about our services, updates, or other information where permitted by law. You can opt out of marketing communications at any time.
Children
Our services are not directed to children. We do not knowingly collect personal data from children without appropriate consent.
Changes to this policy
We may update this policy from time to time to reflect changes in our services, legal requirements, or privacy practices. Any changes will be published on this page.
Contact and complaints
If you have questions about this policy, how we handle your personal data, or wish to make a privacy complaint, please contact us using the contact details provided on this page.