Privacy Policy

Personal Information: We collect personal data that you provide directly to us, including name, email address, telephone number, business address, and any information included in enquiry messages or service engagement forms.

Engagement Information: For clients engaging our legal services, we collect information necessary for service delivery, including corporate documentation, partnership details, project information, and other materials relevant to the specific legal matter.

Technical Information: When you visit our website, we may collect technical data including IP address, browser type, device information, and website usage patterns through cookies and similar technologies.

Communication Records: We maintain records of communications between our firm and clients or prospective clients, including email correspondence, telephone conversations, and meeting notes.

We process personal data on the following legal bases:

Contract Performance: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This applies to client engagements and service delivery.

Legitimate Interests: Processing is necessary for our legitimate interests in operating our legal practice, improving our services, and maintaining client relationships, provided such interests are not overridden by your fundamental rights.

Legal Obligations: Processing is necessary for compliance with legal and regulatory obligations applicable to legal practitioners in Thailand, including professional conduct rules and record-keeping requirements.

Consent: Where required, we obtain your explicit consent for specific processing activities, such as sending marketing communications or using optional cookies.

We use collected information for the following purposes:

Service Delivery: To provide legal advisory services, including BOI application facilitation, joint venture structuring, and compliance programme development. This includes preparing documents, communicating with regulatory authorities, and providing ongoing advisory support.

Client Communication: To respond to enquiries, provide progress updates, schedule consultations, and maintain professional communication throughout engagements.

Quality Assurance: To review service quality, conduct internal audits, and ensure compliance with professional standards.

Legal Compliance: To fulfil obligations under Thai law and professional conduct rules, including record retention requirements and confidentiality duties.

Website Improvement: To analyse website usage patterns and improve user experience, though this is limited to anonymised or aggregated data where possible.

We retain personal data for the following periods:

Client Engagement Records: A minimum of seven years following conclusion of legal services, in accordance with professional record retention requirements for legal practitioners in Thailand.

Enquiry Information: Enquiry data from prospective clients is retained for two years if no engagement is entered into, after which it is securely deleted.

Technical Data: Website usage data and cookies are retained for periods specified in our Cookie Policy, typically ranging from session-based to 12 months.

Communication Records: Professional communications are retained as part of engagement files and follow the retention periods outlined above.

We maintain strict confidentiality but may share personal data in limited circumstances:

Regulatory Authorities: When required by law, we may share information with the Board of Investment, Lawyers Council of Thailand, or other relevant regulatory bodies in connection with service delivery or legal compliance.

Professional Advisors: In specific circumstances requiring specialist input, we may share limited information with other legal professionals or consultants, always subject to confidentiality agreements.

Service Providers: We may engage third-party service providers for document storage, IT services, or administrative support. All such providers are bound by confidentiality obligations and data protection requirements.

Legal Requirements: We may disclose information where required by court order, legal process, or to protect our legal rights or those of third parties.

We do not sell, rent, or trade personal data to third parties for marketing purposes.

We implement appropriate technical and organisational measures to protect personal data:

Access Controls: Personal data is accessible only to authorised team members who require access for legitimate business purposes. Access is controlled through password protection and user authentication systems.

Encryption: Sensitive data is encrypted during transmission and storage using industry-standard encryption protocols.

Physical Security: Physical files containing personal data are stored in secure, access-controlled locations at our Bangkok office.

Regular Reviews: We conduct periodic reviews of our security measures and update protocols as necessary to address evolving threats.

While we implement reasonable security measures, no electronic transmission or storage system can be absolutely secure. We cannot provide absolute guarantees regarding data security.

Under Thai data protection law, you have the following rights regarding your personal data:

Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of such data.

Right to Rectification: You may request correction of inaccurate or incomplete personal data.

Right to Erasure: In certain circumstances, you may request deletion of your personal data, subject to legal and professional retention obligations.

Right to Restriction: You may request limitation of processing in specific situations.

Right to Data Portability: Where technically feasible and legally permitted, you may request transfer of your data to another data controller.

Right to Object: You may object to processing based on legitimate interests, and you may withdraw consent for consent-based processing at any time.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe we have not handled your data appropriately.

Please note that certain rights may be limited by professional duties of confidentiality or legal record retention requirements applicable to legal practitioners.

Our website uses cookies and similar technologies to enhance user experience and analyse website usage. For detailed information about our use of cookies, including types of cookies used and how to manage your preferences, please refer to our Cookie Policy.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Personal data is primarily processed and stored within Thailand. In limited circumstances, data may be transferred to service providers located outside Thailand, such as cloud storage providers. Where international transfers occur, we ensure appropriate safeguards are in place in accordance with Thai data protection law.

Our services are intended for business and organisational clients. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will take steps to delete such information.

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or for operational reasons. Material changes will be communicated through our website or directly to clients where appropriate. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: