Privacy Policy

1. Data We Collect

We collect personal data in the following circumstances:

• When you submit an enquiry through our website contact form: name, email address, and telephone number (if provided), and the content of your message
• When you engage our services: identification documents, financial information relevant to the matter, correspondence, and any personal information you share in the course of the engagement
• When you visit our website: technical data such as your IP address, browser type, and pages visited, collected via cookies and analytics tools

We collect only what is necessary for the purpose for which it is collected. We do not collect sensitive personal data unless it is necessary for the legal matter at hand and you have provided it knowingly.

2. Legal Basis for Processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Contract performance: processing necessary to provide the legal services you have engaged us for
• Legitimate interests: responding to enquiries, website analytics, and improving our services
• Legal obligation: compliance with professional regulatory requirements and applicable law
• Consent: where you have expressly consented, such as for optional cookies

3. How We Use Your Data

We use personal data to:

• Respond to enquiries and arrange consultations
• Deliver the legal services you have retained us for
• Communicate with you about your matter
• Issue invoices and manage billing
• Comply with our professional regulatory obligations
• Analyse website usage in aggregate to improve our services

We do not use your personal data for marketing purposes without your consent and do not sell or rent personal data to third parties.

4. Data Sharing

We share personal data only in the following circumstances:

• With professional advisers we engage in relation to your matter (e.g., foreign counsel), only with your knowledge and for the purposes of the engagement
• With courts, regulators, or authorities where required by law
• With service providers who process data on our behalf (e.g., cloud storage, analytics), under data processing agreements that require equivalent protection

5. Data Retention

Client matter files are retained for seven years after the conclusion of the engagement, in accordance with professional regulatory requirements. Enquiries that did not result in an engagement are retained for twelve months. Website analytics data is retained in aggregate form for up to twenty-four months. You may request deletion of your data subject to applicable retention obligations.

6. Data Security

All client files are stored on encrypted systems with access restricted to the practitioners involved in the relevant matter. Internal systems are protected by multi-factor authentication. We review our security practices periodically and update them as necessary. In the event of a personal data breach affecting your rights, we will notify you without undue delay.

7. Cookies

Our website uses cookies to function and to collect anonymised analytics. Essential cookies are required for basic operation. Analytics and preference cookies are optional and subject to your consent. You can manage cookie preferences at any time through our Cookie Policy page or via your browser settings.

8. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data, subject to legal retention obligations
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Request data portability in a structured, machine-readable format
• Lodge a complaint with the Office of the Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

9. Children's Data

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18 years of age through our website. Personal data relating to children may form part of a client matter — in such cases it is handled with the same protections as all client data and subject to enhanced confidentiality.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.

11. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page. Where changes are material, we will notify active clients directly. Continued use of our website following an update constitutes acceptance of the revised policy.

12. Contact

Data controller: Sukhothai Counsel, 67/14 Ratchadamri Road, Lumpini, Bangkok 10330, Thailand.

Privacy enquiries: [email protected]

Telephone: +66 94 729 4815