Privacy Policy

1. Personal data we collect

We collect personal data only when there is a lawful basis for doing so. The categories of data we may hold include:

• Name and preferred form of address
• Email address and telephone number
• Postal address, where provided
• Information shared in the course of a legal consultation (which may include sensitive personal data relating to family matters, financial circumstances, and children)
• Technical data collected automatically when you visit our website (IP address, browser type, pages visited, time of visit)
• Cookie preference settings stored in your browser

Sensitive personal data — including information about family situations, finances, and children — is collected only in the context of providing legal services, and is subject to strict legal professional privilege.

2. How we collect data

• Directly from you — through the enquiry form on our website, by telephone, by email, or during a consultation appointment
• Automatically — through standard web analytics tools and cookies when you visit our website
• From third parties — in some matters, information may be provided by another party's legal representative or by a court, only to the extent necessary for the conduct of the matter

3. Legal basis for processing

• Contract performance — processing necessary to provide the legal services you have engaged us for
• Legitimate interests — responding to enquiries, managing our records, and maintaining the security of our systems
• Legal obligation — where we are required by Thai law to retain or disclose certain information
• Consent — for optional cookies and any marketing communications; consent may be withdrawn at any time

4. How we use personal data

• To respond to enquiries and arrange consultations
• To provide the legal services described in the service agreement
• To prepare written summaries, documents, and correspondence on behalf of clients
• To comply with our obligations under Thai law, including professional conduct rules
• To improve the functioning of our website through aggregate analytics data

We do not use client data for marketing purposes without explicit consent. We do not sell personal data to any third party.

5. Data sharing and third parties

We share personal data only where necessary for the conduct of the matter or required by law:

• Co-counsel or mediators — where engaged as part of the matter, and only with the client's written consent
• Courts and regulatory bodies — where required by Thai law or court order
• IT service providers — who process data on our behalf under written agreements that require them to maintain appropriate security measures
• Analytics providers — aggregate, anonymised website usage data may be processed by third-party analytics services

6. How long we keep data

• Client matter files — retained for ten years from the close of the matter, in accordance with professional obligations under Thai law
• Enquiry records (where no matter is opened) — retained for twelve months from the date of the enquiry, then deleted
• Website analytics data — retained for twenty-six months in aggregate form
• Cookie consent records — retained for twelve months

7. Security measures

• Client files are stored on access-controlled systems, accessible only to authorised members of the team
• Electronic communications containing personal data are transmitted over encrypted connections
• Paper documents containing sensitive information are stored in locked cabinets
• In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the Office of the Personal Data Protection Committee (PDPC) within the timeframes required by the PDPA

8. Cookies

Our website uses a small number of cookies. Essential cookies are necessary for the site to function and cannot be switched off. Optional cookies — including analytics and preference cookies — are used only with your consent. You can adjust your cookie preferences at any time by visiting our Cookie Policy page.

9. Your rights under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to our legal retention obligations
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw any consent you have given, without affecting the lawfulness of prior processing
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC), the supervisory authority for data protection in Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

10. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data directly from individuals under 18. Where a matter involves the welfare of a child, information relating to the child is collected only from the adult client and is handled with additional care.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website after any change constitutes acceptance of the revised policy.

13. Contact for data enquiries

If you have any questions about this policy or wish to exercise your rights, please contact: