LEGAL
Privacy Policy
Last updated: 15 May 2025 · Effective: 15 May 2025
Khrua Counsel ("we", "us", "our") is committed to protecting the privacy of the individuals and families who contact us. This policy explains what personal data we collect, how we use it, and the rights you have regarding your information. It applies to all services offered by Khrua Counsel, operating from 64 Wualai Road, Haiya, Chiang Mai 50100, Thailand.
1. Data Controller
The data controller for information collected through our website and services is Khrua Counsel, 64 Wualai Road, Haiya, Chiang Mai 50100, Thailand. For data-related enquiries, contact us at [email protected].
2. What Personal Data We Collect
We collect personal data only where necessary to provide our services or to communicate with prospective clients. This may include:
- Name and contact details (email address, phone number)
- The nature of the matter you describe in contact forms or messages
- Business address where relevant to your enquiry
- Technical data collected automatically: IP address, browser type, pages visited, time on site (via cookies and analytics tools)
We do not collect sensitive legal data except where you choose to share it as part of describing your situation to us.
3. How We Collect Data
- Contact form submissions — when you use the form on our website
- Email and telephone enquiries — when you contact us directly
- Cookies and analytics — automatically, when you visit our website (see cookie section below)
4. Legal Basis for Processing
We process personal data under the following legal bases recognised by Thailand's Personal Data Protection Act B.E. 2562 (PDPA):
- Consent — where you have expressly agreed, such as by submitting a contact form
- Legitimate interests — for operational communication and website analytics, where these do not override your rights
- Legal obligation — where we are required to retain or disclose data under Thai law
5. How We Use Your Data
- To respond to your enquiry and provide the services you have requested
- To send you documentation relevant to your matter (e.g. written consultation summaries)
- To manage our client relationships and administrative records
- To improve our website and understand how visitors use it
We do not use personal data for automated decision-making or profiling. We do not sell or share personal data with third parties for marketing purposes.
6. Data Sharing
We may share data with:
- Courts and government bodies — where required by Thai law or by the scope of services you have engaged
- Service providers — such as website hosting and analytics tools, who process data on our behalf under confidentiality obligations
All third-party processors are required to maintain appropriate data security standards.
7. Data Retention
Personal data from contact form enquiries that do not proceed to a formal engagement is retained for up to 12 months. Client records relating to completed matters are retained for a minimum of 7 years in accordance with Thai legal practice requirements, after which they are securely deleted.
8. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include encrypted email communications, secure document storage, and restricted access controls within our practice. In the event of a personal data breach that poses a risk to your rights, we will notify you in accordance with the PDPA.
9. Cookies
Our website uses cookies to support basic functionality and to understand how visitors use the site. For full details, see our Cookie Policy. You may manage your preferences at any time.
10. Your Rights
Under the Thailand Personal Data Protection Act, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to our legal obligations
- Object to or restrict certain types of processing
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Personal Data Protection Committee of Thailand
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
11. Third-Party Links
Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites, and we recommend reviewing their policies independently.
12. Children
Our website and services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18 without appropriate parental or guardian consent.
13. Changes to This Policy
We may update this policy from time to time. Where changes are material, we will update the effective date above. Continued use of our website following an update constitutes acceptance of the revised policy.
14. Contact for Data Enquiries
For any questions about this policy or your personal data:
Email: [email protected]
Address: 64 Wualai Road, Haiya, Chiang Mai 50100, Thailand