Privacy Policy

1. Data Controller

The data controller responsible for personal data collected through this website and our services is:

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Information you provide directly

• — Full name and contact details (email address, phone number)
• — Details of your pension situation as shared in enquiries or consultations
• — Documents you provide in connection with our services (pension records, correspondence, identification)
• — Any other information included in messages sent through our website or by email

2.2 Information collected automatically

• — IP address and browser information when you visit this website
• — Pages viewed, time spent, and navigation paths (via analytics cookies, if consented)
• — Device type and operating system

2.3 Legal basis for processing

We process personal data on the basis of: your consent (for website cookies and analytics); performance of a contract or pre-contractual steps (for service enquiries and engagements); and our legitimate interest in operating a legal practice and improving our website.

2.4 Retention

Contact form enquiries are retained for up to 12 months. Client matter files are retained for 7 years following the conclusion of an engagement, in accordance with Thai legal professional obligations. Analytics data is retained for up to 26 months.

3. How We Use Your Personal Data

• Responding to enquiries: We use the name, email, phone number, and message content you provide to respond to your contact and assess your situation.
• Providing legal services: Where an engagement is agreed, we use the information provided to prepare and deliver the relevant service, including communicating with pension authorities on your behalf where authorised.
• Website improvement: Anonymised and aggregated analytics data helps us understand how visitors use our site and how we can improve it.
• Legal compliance: We may retain and use data to meet our obligations under Thai professional regulations, tax law, or in response to lawful legal demands.

We do not sell personal data to third parties. We do not use your personal data for automated decision-making. We do not send unsolicited marketing communications.

4. Data Sharing

We share personal data only where necessary and in limited circumstances:

• — Pension authorities and government bodies — where you have authorised us to act or communicate on your behalf
• — IT service providers — who host this website and provide email infrastructure, under contractual data processing agreements
• — Analytics providers — such as Google Analytics, where you have consented to analytics cookies
• — Law enforcement or regulators — where we are legally required to disclose information

5. Data Protection Measures

• Encrypted transmission: This website uses HTTPS. Contact form submissions and emails are transmitted over encrypted connections.
• Access controls: Client files are accessible only to the staff members working on a given matter. Access credentials are managed individually.
• Secure storage: Paper documents are held in locked storage. Electronic records are stored on password-protected systems with restricted access.
• Breach response: In the event of a data breach likely to affect your rights, we will notify you and the relevant authority as required by law, within the applicable timeframes.

6. Cookies

This website uses cookies. Essential cookies are necessary for the site to function and are always active. Optional cookies (analytics, preferences) are only set with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

7. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you have the following rights in relation to personal data we hold about you:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

8. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

9. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.

11. Contact for Privacy Matters

For any questions or requests relating to this policy or your personal data, please contact: