Privacy Policy
Last updated: 10 April 2025
1. Introduction
Sathaphon Legal ("we", "us", "our") is committed to handling personal information with care and in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"). This policy explains what personal data we collect, how we use it, how long we keep it, and what rights you have in relation to it. If you have questions about any part of this policy, you may contact us at [email protected].
2. Data we collect and how we collect it
We collect personal data in the following ways:
- ■ Contact form submissions — name, email address, telephone number, and any message you choose to include.
- ■ Telephone enquiries — name and contact details you provide during the call.
- ■ Client engagements — information provided in the course of instructing us, which may include personal details, family information, and details of assets relevant to the matter.
- ■ Website analytics — technical data about how you use our website (browser type, pages visited, time on site), collected through cookies with your consent.
We do not collect sensitive personal data (such as health or financial information) through our website. Such information may be collected in the course of a client engagement, where it is necessary for the matter you have instructed us on.
3. How we use your personal data
We use personal data for the following purposes:
- ■ Responding to enquiries you have submitted through our website or by telephone.
- ■ Carrying out the legal work you have instructed us to perform.
- ■ Maintaining accurate records of client matters and instructions.
- ■ Sending administrative communications related to your matter (appointment confirmations, document summaries).
- ■ Complying with legal and professional obligations applicable to legal practitioners in Thailand.
- ■ Understanding how our website is used, in order to improve the information we provide (analytics cookies, with your consent).
4. Legal basis for processing
We process your personal data on the following legal bases: your consent (for analytics cookies and marketing communications); the performance of a contract (for carrying out the services you have instructed us on); our legitimate interests as a legal practice (for maintaining matter records and responding to enquiries); and compliance with legal obligations applicable to legal practitioners in Thailand.
5. How long we keep your data
Contact enquiry data is retained for 12 months from the date of your enquiry, unless it leads to a client engagement. Client matter records are retained for 10 years from the close of the matter, in accordance with professional obligations. Analytics data is retained in aggregated, anonymised form.
6. Sharing your data
We do not sell, share, or disclose your personal data to third parties for their own purposes. We may share data with third-party service providers who assist us in operating our website (such as hosting providers), subject to appropriate data processing agreements. We may also share data when required by Thai law or by a competent authority.
7. Data protection measures
We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. Access to client matter files is restricted to members of the firm involved in the relevant matter. Our website uses HTTPS encryption. We review our data security practices periodically.
8. Cookies
Our website uses cookies. Essential cookies are necessary for the site to function and are always active. Optional cookies (analytics, marketing, preferences) are only placed with your consent. For full details, please see our Cookie Policy.
9. Your rights
Under the PDPA, you have the following rights in relation to your personal data:
- ■ The right to be informed about how your data is used.
- ■ The right to access the personal data we hold about you.
- ■ The right to have inaccurate data corrected.
- ■ The right to request deletion of your personal data, subject to our legal obligations to retain certain records.
- ■ The right to withdraw consent (where processing is based on consent).
- ■ The right to object to processing for certain purposes.
- ■ The right to data portability in certain circumstances.
- ■ The right to lodge a complaint with the Personal Data Protection Committee of Thailand.
To exercise any of these rights, please contact us at [email protected].
10. Third-party links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before submitting any personal data.
11. Children
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us so that we can delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will update the "last updated" date at the top. We encourage you to review this page periodically. Continued use of our website following any change constitutes acceptance of the revised policy.
13. Contact
For any questions or requests relating to your personal data, please contact:
Sathaphon Legal
24/8 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 192 4865