Privacy Policy

1. Data We Collect

We collect personal data through our website contact form, direct email correspondence, and in the course of providing legal services. The types of personal data we may collect include:

• Full name
• Email address
• Telephone number (where provided)
• The content of messages sent through our contact form
• Information shared during the course of a consultation
• Technical data such as IP address, browser type, and pages visited (via analytics cookies, where consented)

Legal basis for processing: We process personal data on the basis of consent (for website enquiries), contractual necessity (for active client engagements), and legitimate interest (for maintaining records of our legal services, as required by professional standards).

Retention: Client files are retained for a minimum of seven years following the completion of an engagement, in accordance with Thai legal professional standards. Website enquiry data is retained for twelve months unless a client engagement results.

2. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries and arranging appointments
• Delivering the legal services you have engaged us to provide
• Preparing legal documents on your behalf
• Maintaining records required by our professional obligations
• Complying with legal and regulatory obligations
• Improving the performance and usability of our website (analytics only, where consented)

We do not use your personal data for marketing purposes without your explicit consent. We do not sell or share your personal data with third parties for commercial purposes.

3. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• With Thai courts, government authorities, or regulatory bodies where required as part of the legal services we are providing on your behalf
• With third-party service providers who support our website operations (e.g. analytics tools), under data processing agreements
• Where we are legally required to do so by applicable Thai law

Any third parties with whom data is shared are required to handle it in accordance with applicable data protection law and our instructions.

4. Data Protection & Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and loss. These include:

• Encrypted storage of digital client records
• Restricted access to client files on a need-to-know basis
• Secure physical storage of any paper documentation
• Annual review of data handling practices

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours and will inform affected individuals without undue delay.

5. Cookies

Our website uses cookies to support basic functionality and, where you have consented, to collect anonymised analytics data. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies required for the website to function are set regardless of consent.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful basis for continued retention
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Note that some requests may be limited by our professional record-keeping obligations.

You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your data has been handled improperly.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently before sharing personal data.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will take appropriate steps.

9. Policy Updates

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website or services after a change constitutes acceptance of the updated policy.