Privacy Policy

1. What information we collect

When you contact us through our website form or by email, we may collect your name, email address, and phone number if you provide them. We also collect information about how you use the website through cookies and analytics tools (see Section 5).

We do not collect sensitive personal data through the website. If your legal matter involves sensitive information, this is handled under separate professional confidentiality obligations and is not processed under this policy.

2. How we use your information

• To respond to your enquiry or arrange an appointment
• To send you information you have requested about our services
• To maintain records of contact for administrative purposes
• To improve our website using anonymised analytics data

We do not use your information for marketing to third parties, and we do not sell or rent personal data to any organisation.

3. Legal basis for processing

Under the PDPA, we process personal data on the following bases:

• Consent — when you submit the website contact form, you consent to us using your information to respond to your enquiry
• Legitimate interest — for website analytics that help us improve our services, where this does not override your privacy interests
• Contract — for information necessary to deliver services you have engaged us for

4. How long we keep your information

Enquiry records are kept for up to 12 months from the date of your last contact with us, unless you become a client, in which case separate retention policies apply. Analytics data is retained in anonymised form only and is not linked to identifiable individuals.

5. Cookies and analytics

Our website uses cookies to support basic functionality and to understand how visitors use the site. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

We may use analytics services such as Google Analytics to understand traffic patterns on our website. These services process data in anonymised or pseudonymised form.

6. Sharing your information

We do not share your personal data with third parties except where required by law or where you have given explicit consent. We may use trusted third-party service providers (such as email hosting) to process data on our behalf, and these are bound by appropriate data processing agreements.

7. Data protection measures

We maintain appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. Access to records is restricted to staff who require it for their work. Our website uses HTTPS encryption.

8. Your rights under the PDPA

Under Thai data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data where it is no longer required
• Withdraw consent at any time (where processing is based on consent)
• Object to processing based on legitimate interest
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

10. Children's privacy

Our website and services are intended for adults (18 years and over). We do not knowingly collect personal data from minors through our website.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the website after changes constitutes acceptance of the revised policy.