Privacy Policy

1. Data We Collect

When you contact us, submit an enquiry form, or engage our services, we may collect the following categories of personal data:

• Identity data: full name, title, date of birth where relevant to service delivery.
• Contact data: email address, telephone number, postal address.
• Service data: pension contribution history, authority correspondence, and other information provided by you in relation to your pension matter.
• Technical data: IP address, browser type, pages visited, and session duration collected via cookies and analytics tools.
• Communication data: records of correspondence between you and our team.

We collect this data when you complete an online enquiry form, contact us by telephone or email, or provide documents in connection with your engagement.

2. Legal Basis for Processing

We process your personal data on one or more of the following legal bases under the PDPA:

• Consent: where you have given us your explicit consent to process your data, such as when submitting an enquiry form.
• Contract: where processing is necessary to perform a service agreement you have entered into with us.
• Legitimate interests: where processing serves our legitimate interest in operating and improving our practice, provided this does not override your rights.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.

3. How We Use Your Data

Your personal data is used for the following purposes:

• To respond to your enquiry and assess how we may assist you.
• To deliver the legal services you have engaged us to provide.
• To maintain records required for professional practice and regulatory compliance.
• To send you service-related communications, such as appointment confirmations or follow-up correspondence.
• To improve our website by understanding how visitors navigate and use our content (analytics, non-personalised).

We do not use your personal data for unsolicited marketing communications without your prior consent. We do not sell your personal data to third parties under any circumstances.

4. Data Sharing

We may share your data in limited, specific circumstances:

• Service providers: trusted third parties who assist with IT infrastructure, email, or document management — bound by confidentiality obligations.
• Pension authorities or government bodies: where you have authorised us to correspond on your behalf.
• Legal and regulatory bodies: where we are required by law to disclose information.
• Analytics providers: anonymised or aggregated data only; no personally identifiable information is shared.

5. Data Retention

We retain personal data for as long as necessary for the purpose for which it was collected, or as required by law. Client matter files are typically retained for a period of seven years following the conclusion of an engagement, in accordance with standard professional practice. Technical and analytics data is retained for no longer than two years. Enquiry records where no engagement follows are retained for up to twelve months and then deleted.

6. Data Security

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or loss. These measures include access controls, password protection, and regular review of our data handling practices. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority in accordance with our obligations under the PDPA.

7. Cookies

Our website uses cookies to support essential site functions and to understand how visitors use our content. You may manage your cookie preferences through the consent panel shown on your first visit or at any time via our Cookie Policy page. Disabling non-essential cookies does not affect your ability to use our website or contact us.

8. Your Rights

Under the Personal Data Protection Act B.E. 2562 and applicable data protection law, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data where there is no lawful basis for continued retention.
• Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting prior processing.
• Right to lodge a complaint: to raise a concern with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have not been respected.

To exercise any of these rights, please write to us at [email protected]. We will respond within thirty days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites, and this policy does not apply to them. We encourage you to review the privacy policy of any site you visit.

10. Children's Privacy

Our services are intended for persons aged 18 or over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material updates will be indicated by a revised “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised terms.