Privacy Policy

1. Introduction

Sathorn Tham ("we", "us", "our") is a legal advisory practice based at 287 Silom Road, Suriyawong, Bang Rak, Bangkok 10500, Thailand. We are committed to handling personal data responsibly and in compliance with the Personal Data Protection Act B.E. 2562 (PDPA).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. If you have questions, please contact us at privacy@sathornthamas.

2. Data We Collect

We collect personal data that you provide directly to us and data that is collected automatically when you use our website.

Information You Provide

• Name and contact details (email address, phone number)
• The content of messages submitted through our contact form
• Information shared during consultations relevant to your legal matter
• Billing and payment information where applicable

Automatically Collected Data

• IP address and browser type
• Pages visited and time spent on the site
• Referring website or search term used to reach us
• Device type and operating system (for technical compatibility)

3. How We Use Your Data

We use personal data for the following purposes and only where we have a lawful basis to do so under the PDPA:

• Service delivery: To respond to enquiries, arrange consultations, and conduct advisory engagements.
• Communication: To send information related to your matter or your engagement with us.
• Legal compliance: To meet obligations under Thai law, including record-keeping requirements for legal practitioners.
• Website improvement: To understand how visitors use our site and make improvements accordingly. This uses aggregated, anonymised data only.
• Legitimate interests: To maintain accurate records and ensure the security of our systems.

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

4. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law.

• Client matter records: Retained for 7 years following the close of an engagement, in accordance with professional record-keeping obligations.
• Enquiry records (where no engagement followed): Retained for 12 months from the date of enquiry.
• Website analytics data: Retained in aggregated form; individual session data is not retained beyond 26 months.

5. Data Protection Measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

• Client data is stored on encrypted systems with access restricted to counsel directly involved in the matter.
• Physical documents are held in secure, access-controlled storage at our Silom Road office.
• We review our data handling practices on an annual basis.
• In the event of a data breach, we will notify affected individuals and the relevant authorities in accordance with PDPA requirements.

6. Third-Party Data Sharing

We do not share personal data with third parties except in the following circumstances:

• With your consent: Where you have specifically agreed to data being shared, for example with a co-counsel or professional adviser involved in your matter.
• Legal obligation: Where we are required by Thai law or a court order to disclose information.
• Service providers: We may use third-party IT service providers (cloud storage, email systems) who process data on our behalf under data processing agreements. These providers are required to handle data only as instructed by us.

We use Google Analytics for website analytics. This service processes anonymised data about website use. You may opt out of Google Analytics tracking by adjusting your cookie preferences.

7. Cookies

Our website uses cookies to function properly and to understand how it is used. For full information about the cookies we use and how to manage them, please see our Cookie Policy.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your data in certain circumstances.
• Right to restriction: To request that we limit how we use your data while a query is being resolved.
• Right to data portability: To receive your data in a structured, commonly used format.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, to withdraw it at any time.

To exercise any of these rights, please contact us at privacy@sathornthamas. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies directly.

10. Children

Our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data through our site, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of our website following a change constitutes acceptance of the updated policy.

12. Contact

For all data-related enquiries:

Sathorn Tham
287 Silom Road, Suriyawong, Bang Rak, Bangkok 10500, Thailand
Email: privacy@sathornthamas
Phone: +66 2 634 8152