Privacy Policy

1. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, telephone number, and the content of any message you send via our website.
• Appointment and matter records: the personal and family information you share with us in the course of obtaining legal advice, including names, circumstances, and financial details where relevant to your matter.
• Website analytics: technical data about how the site is used, including IP addresses, pages visited, and browser type — collected through analytics cookies where you have consented.
• Correspondence: email and telephone communications relating to your matter or enquiry.

We do not collect sensitive personal data unless it is directly relevant to the legal matter you have engaged us to assist with. Where it is necessary to collect such data, we do so only with your explicit consent.

2. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Contract performance: where processing is necessary to provide the legal service you have engaged us to perform.
• Legitimate interests: to respond to enquiries, manage our client records, and maintain the security and proper operation of the practice.
• Consent: for optional activities such as analytics cookies and marketing communications. You may withdraw consent at any time.
• Legal obligation: where we are required by law to retain or disclose certain records.

3. How We Use Your Data

• To respond to your initial enquiry and arrange appointments.
• To provide and administer the legal services you have engaged us to perform.
• To communicate with you about your matter, including sending appointment summaries and relevant correspondence.
• To maintain our internal client records and comply with our professional obligations.
• To improve the website using anonymised analytics data, where you have consented to analytics cookies.
• To comply with any legal, regulatory, or professional obligations that require us to retain or disclose information.

We do not use your personal data for marketing purposes without your separate consent, and we do not sell or rent your data to any third party.

4. Data Sharing

We share your personal data only in the following circumstances:

• With courts and opposing parties: where necessary in the conduct of your legal matter and with your knowledge and consent.
• With service providers: such as our secure email and document storage providers, who process data on our behalf under strict confidentiality obligations.
• As required by law: where we are compelled to disclose information by a court order, regulatory requirement, or legal obligation.

We do not transfer personal data outside of Thailand unless it is necessary for the conduct of your matter and with your knowledge.

5. Data Retention

We retain client matter records for a minimum of seven years from the conclusion of the matter, in accordance with professional conduct requirements. Website enquiry records are retained for a maximum of two years where no engagement follows. We review and delete data that is no longer required on a regular basis.

6. Data Security

• Personal data is stored on secure servers with access restricted to authorised members of the practice.
• Email communications containing personal or sensitive information are sent via encrypted channels where possible.
• Physical documents are stored in locked, access-controlled office premises.
• In the event of a data breach that is likely to cause harm, we will notify the Office of the Personal Data Protection Committee and affected individuals as required by the PDPA.

7. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. We use optional analytics and preference cookies only where you have consented. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the PDPA you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data, subject to our legal and professional obligations to retain certain records.
• Right to data portability: to receive your data in a commonly used format.
• Right to object: to processing based on legitimate interests.
• Right to withdraw consent: at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.

To exercise any of these rights, please contact us at [email protected].

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

10. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from minors through our website. If you believe a minor has provided personal data to us, please contact us and we will take steps to delete it.

11. Policy Updates

We may update this policy from time to time to reflect changes in law or our practices. The revised policy will be published on this page with an updated date. Continued use of our services after an update constitutes acceptance of the revised policy.

12. Contact

For any questions about this policy or to exercise your rights, please contact: