Privacy Policy

1. Data Controller

The data controller for personal data collected through this website and through our legal practice is:

2. Personal Data We Collect

We collect personal data only when it is necessary for the services we provide or for the operation of this website. Data may be collected through our contact form, direct correspondence, and client engagement processes.

• Contact data: name, email address, phone number
• Matter-related data: information about the estate, deceased persons, heirs, and related documents provided in connection with our legal services
• Website usage data: browser type, pages visited, time on site (collected via analytics cookies, where consent is given)
• Communication records: emails, letters, and notes from consultations

3. Legal Basis for Processing

We process personal data on the following lawful bases under the PDPA:

• Contract performance: processing necessary to fulfil our legal services agreement with you
• Legitimate interests: responding to enquiries and maintaining client records
• Legal obligation: complying with applicable laws including professional conduct requirements
• Consent: for analytics and marketing cookies, where you have provided consent

4. How We Use Personal Data

Personal data is used for the following purposes:

• Responding to enquiries received through our website or by telephone
• Providing legal advice and services in connection with inheritance and succession matters
• Maintaining records of our client engagements
• Complying with professional and legal obligations
• Improving the quality and accessibility of our website (analytics only, with consent)

We do not use personal data for unsolicited marketing purposes. We do not sell personal data to third parties.

5. Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure storage of electronic files with access restricted to authorised personnel
• Encrypted transmission of data via HTTPS
• Physical security of paper files held at our office
• Periodic review of access controls and data handling procedures

In the event of a data breach that is likely to affect your rights and freedoms, we will notify affected individuals and, where required, the relevant supervisory authority, within the timeframes set out under the PDPA.

6. Data Retention

Client matter files are retained for a minimum of seven years following the conclusion of an engagement, consistent with professional obligations and applicable limitation periods under Thai law. Enquiry data from individuals who do not proceed to engagement is retained for up to twelve months. Website analytics data is retained for up to twenty-four months.

7. Cookies

Our website uses cookies to support basic functionality and, with your consent, to collect anonymised analytics data. You can manage cookie preferences at any time through our Cookie Policy page. Essential cookies are necessary for the website to operate and cannot be disabled.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of data where there is no lawful basis for retention
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent for any processing based on consent, at any time

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data from a minor has been collected inadvertently, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Material changes will be indicated by an updated date at the top of this page. Continued use of our services after an update constitutes acceptance of the revised policy.

12. Contact for Privacy Matters

For any questions about this Privacy Policy or your personal data, please contact us: