Privacy Policy

1. Introduction and Scope

Thanya Legal ("we", "us", "our") is a legal practice based in Bangkok, Thailand, providing pension legal services. We take the privacy of our clients and website visitors seriously and handle personal data with the same care and discretion we bring to our legal work.

This policy explains what personal data we collect when you visit our website or use our services, how we use it, the legal basis on which we rely, and the rights you have in relation to your information. It applies to data collected through our website at thanyale.live and through any direct engagement with our practice.

If you have questions about anything in this policy, please contact us at [email protected].

2. Data We Collect and How We Collect It

2.1 Information you provide directly

When you contact us via the website form, by email, or by telephone, we may collect your name, email address, telephone number, and the details of your enquiry. For clients who engage our services, we collect additional information relevant to your matter, including employment history, pension records, and correspondence with pension authorities.

2.2 Information collected automatically

When you visit our website, we collect standard technical data including your IP address, browser type, operating system, pages visited, and time of visit. This information is collected through cookies and similar technologies. Please see our Cookie Policy for details.

2.3 Legal basis for processing

• Contract performance: Processing necessary to provide the legal services you have engaged us for
• Legitimate interest: Responding to enquiries, maintaining records, improving our website
• Legal obligation: Compliance with applicable Thai law, including the Lawyers Council regulations
• Consent: Where you have given specific consent, such as for marketing communications (you may withdraw at any time)

2.4 Data retention

Client matter files are retained for seven years following conclusion of the matter, in accordance with professional conduct obligations. Website enquiry data is retained for twenty-four months unless you request earlier deletion. Analytics data is retained for thirteen months.

3. How We Use Your Personal Data

We use the information we collect for the following purposes:

• Responding to enquiries and arranging consultations
• Providing the legal services you have engaged us for
• Communicating with pension authorities, funds, and third parties on your behalf (with your authority)
• Maintaining records of our professional work as required by the Lawyers Council of Thailand
• Sending service-related communications (invoices, updates on your matter)
• Improving our website and understanding how it is used
• Complying with legal and regulatory obligations

We do not sell your personal data to third parties. We do not use your data for profiling or automated decision-making.

4. Sharing Your Data with Third Parties

We share personal data only where necessary and with appropriate safeguards:

• Pension authorities and funds: Only as instructed by you in connection with your matter
• Website analytics: Anonymised usage data may be processed by Google Analytics
• IT service providers: Hosting and email providers who process data on our behalf under data processing agreements
• Legal and regulatory bodies: Where we are required to disclose information by law

5. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who within the practice can access client files
• Secure storage of physical documents
• Regular review of our data handling procedures

In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authority as required by the Thailand Personal Data Protection Act (PDPA).

6. Cookies

Our website uses cookies to improve your experience and to understand how visitors use the site. Essential cookies are required for the site to function. You may accept or decline optional cookies through the consent banner when you first visit. For full details, please read our Cookie Policy.

7. Your Rights Under the Thailand PDPA

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right of rectification: To ask us to correct inaccurate or incomplete data
• Right of erasure: To request deletion of your data where there is no lawful basis for its continued retention
• Right to data portability: To receive your data in a structured, commonly used format
• Right to object: To object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: With the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

8. External Links

Our website may contain links to external websites, including pension authority websites and regulatory bodies. We are not responsible for the privacy practices of those sites and recommend that you review their policies separately.

9. Our Services and Minors

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will take appropriate steps.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website following any change constitutes acceptance of the updated policy.

11. Contact the Data Controller

If you have questions or concerns about how we handle your personal data, please contact us: