Privacy Policy

1. Introduction

Krathong Law ("we", "us", "our") is committed to handling personal information with care and discretion. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it. It applies to visitors to our website and to individuals who enquire about or engage our legal services.

Our services involve sensitive family matters. We take our responsibilities regarding personal data seriously and apply the standards required by Thailand's Personal Data Protection Act B.E. 2562 (PDPA) throughout our practice.

Questions about this policy may be directed to: [email protected]

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, telephone number provided via our contact form or directly.
• Case-related information: Details about family circumstances shared during consultations or engagement — including information about children, other parties, and legal history. This may include sensitive personal data.
• Website usage data: Technical data including IP address, browser type, pages visited, and session duration, collected via analytics cookies where consent has been given.
• Communications: Records of email and telephone correspondence relating to an enquiry or engagement.

3. How We Collect Data

• Directly from you via our website contact form
• By telephone or email when you contact us
• During consultations and in the course of legal engagement
• Through cookies and analytics where you have consented (see Section 7)

4. Legal Basis for Processing

We process personal data on the following legal grounds under the PDPA:

• Consent: Where you have provided explicit consent, including consent to the use of non-essential cookies.
• Contract: Where processing is necessary to carry out services you have engaged us to perform.
• Legitimate interests: For general enquiry management and website operation, where these do not override your rights.
• Legal obligation: Where we are required to process data to comply with applicable law, including professional obligations as registered legal practitioners.

5. How We Use Your Data

• To respond to enquiries and provide requested legal services
• To communicate with you about your matter
• To draft documents, coordinate with other counsel, and represent you in proceedings
• To improve the performance and usability of our website (where analytics consent is given)
• To comply with our professional obligations as members of the Lawyers Council of Thailand

We do not sell, rent, or share personal data with third parties for marketing purposes.

6. Data Sharing

We may share personal data with the following parties where necessary:

• Foreign counsel: Where your matter requires coordination with legal practitioners in another jurisdiction, we share relevant information with your knowledge and consent.
• Thai courts and government bodies: Where required by proceedings or legal obligation.
• Service providers: Including secure cloud storage and encrypted email providers who are contractually bound to handle data appropriately.

7. Data Retention

We retain personal data for as long as is necessary for the purposes for which it was collected:

• Enquiry records (where no engagement follows): 12 months
• Client matter files: 7 years following conclusion of the matter, in accordance with professional record-keeping obligations
• Website analytics data: 26 months (where consent given)

8. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted storage of digital files
• Access controls limiting data access to authorised personnel only
• Use of encrypted email for sensitive communications
• Regular review of security procedures

In the event of a personal data breach, we will notify affected individuals and, where required by the PDPA, the relevant supervisory authority, within the timeframes required by law.

9. Cookies

Our website uses essential cookies necessary for basic functionality, and optional analytics and preference cookies where you have provided consent. For full details, please see our Cookie Policy.

10. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, subject to our legal obligations to retain certain records.
• Right to portability: Request your data in a commonly used machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, contact us at [email protected].

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their policies before sharing personal data.

12. Children's Privacy

Our website and services are directed at adults (18 years and over). We do not knowingly collect personal data directly from children. Where a matter involves a child, data relating to that child is handled with heightened care and only to the extent necessary to provide the requested legal services.

13. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be notified via the website. The date at the top of this page reflects when the policy was last revised. Continued use of our services following any update constitutes acceptance of the revised policy.

14. Contact and Data Controller Details

Data Controller: Krathong Law

28 Beach Road, Nong Prue, Bang Lamung, Chonburi 20150, Thailand

Email: [email protected]

Telephone: +66 38 426 9183