Privacy Policy

1. Introduction

Thayat Legal ("we", "us", "our") is committed to protecting the personal information of everyone who contacts or engages with us. This policy explains what data we collect, how we use it, the basis on which we process it, and your rights in relation to it.

This policy applies to information collected through our website and through direct correspondence, consultations, and service delivery. It is governed by the Thailand Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity data: full name, initials or preferred name
• Contact data: email address, telephone number, postal address
• Enquiry data: the content of messages or forms submitted to us
• Matter-related data: information provided during consultations or case work (which may include sensitive details about family circumstances and estate matters)
• Technical data: IP address, browser type, pages visited, via cookies and analytics tools

We collect data when you submit an enquiry form, contact us by email or phone, attend a consultation, or engage us for a service. We do not collect data from third parties without your knowledge.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: for marketing communications and non-essential cookies, where you have given explicit consent
• Contract: where processing is necessary to deliver a service you have engaged us for
• Legitimate interests: for website security, improving our services, and responding to enquiries
• Legal obligation: where we are required to retain or share data by Thai law

4. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering legal services you have engaged us to provide
• Corresponding with courts, government authorities, or third parties on your behalf (with your knowledge)
• Maintaining records required by Thai law for legal practice
• Improving the functionality and performance of our website

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making.

5. Data Retention

We retain personal data for the following periods:

• Enquiry data (no service engaged): 12 months from the date of enquiry
• Matter-related data (service engaged): 7 years from the conclusion of the matter, as required for legal practice records
• Website analytics data: up to 26 months, subject to cookie preferences

After the applicable retention period, data is securely deleted or anonymised.

6. Data Protection Measures

We take reasonable and appropriate steps to protect personal data against unauthorised access, disclosure, loss, or destruction. These include:

• Encrypted storage and transmission of electronic data
• Access controls limiting data access to authorised personnel only
• Secure physical storage of paper records
• Regular review of data handling practices

In the event of a data breach that poses a risk to individuals, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours of becoming aware, and inform affected individuals without undue delay where required.

7. Cookies

Our website uses cookies to support basic functionality and to understand how the site is used. Essential cookies are required for the site to operate; analytics and preference cookies are optional and require your consent.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of rectification: to request correction of inaccurate or incomplete data
• Right of erasure: to request deletion of your data in certain circumstances
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: to withdraw consent for processing at any time, without affecting lawfulness of prior processing
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC)

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will take steps to remove it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website after any update constitutes acceptance of the revised policy.

12. Contact

Data Controller: Thayat Legal
76 Thanon Tha Phae, Chang Khlan, Muang, Chiang Mai 50100, Thailand
Email: [email protected]
Telephone: +66 90 264 7351