Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We collect personal data through the following means:

Information you provide directly

• Full name and contact details (telephone, email address)
• Nature of your enquiry or matter
• Any personal or family information you share during a consultation or in correspondence
• Identity documents where required by law for notarization or client verification

Information collected automatically

• IP address and browser type when you visit our website
• Pages viewed and time spent on the site (via analytics cookies)
• Referring URL and general geographic location (country or city level)

3. How and Why We Use Your Data

We process personal data only where we have a lawful basis to do so under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, EU General Data Protection Regulation (GDPR) for data subjects in the European Economic Area. The purposes and corresponding bases are set out below.

We do not use your personal data for unsolicited marketing communications.

4. Data Retention

Client matter files and related correspondence are retained for a minimum of ten years following the conclusion of a matter, in accordance with professional obligations under Thai law. Website enquiry data is retained for up to two years from the date of first contact where no engagement follows. Analytics data is retained in aggregated form for up to twenty-six months. Where data is no longer required for any lawful purpose, it is securely deleted or anonymized.

5. Sharing of Personal Data

We do not sell personal data. We may share data in the following limited circumstances:

• With professional counterparts (such as solicitors in other jurisdictions) where directly necessary to carry out work you have instructed us to perform
• With government authorities and courts in Thailand where required by law or legal process
• With our analytics and technology service providers (such as Google Analytics), strictly for website operation and improvement, under data processing agreements
• Where you have given explicit consent to a specific disclosure

Any third party receiving personal data from us is required to handle it in accordance with applicable data protection law.

6. Security Measures

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These include encrypted communication channels, access controls limited to authorized personnel, and secure physical storage for client documents. In the event of a data breach that poses a risk to data subjects, we will notify affected individuals and relevant authorities in accordance with applicable law.

7. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Cookies are categorized as essential (necessary for the site to operate), analytics (to measure site usage), and marketing (where applicable). You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect your ability to use the site.

8. Your Rights

Under the PDPA and, where applicable, the GDPR, you have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you
• Rectification: to request correction of inaccurate or incomplete data
• Erasure: to request deletion of your data where there is no longer a lawful basis for retaining it
• Restriction: to request that we limit the processing of your data in certain circumstances
• Portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract
• Objection: to object to processing based on legitimate interest
• Withdrawal of consent: to withdraw any consent previously given, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand or, where applicable, the supervisory authority in your country of residence.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently. This Privacy Policy applies only to data collected through our own website and services.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will arrange for its deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of the page. Material changes will be communicated by a notice on our website. Continued use of our website or services after any change constitutes acceptance of the updated policy.

12. Contact for Data Enquiries

For any question or request relating to this Privacy Policy or our data handling practices, please write to: