LEGAL DOCUMENT
Privacy Policy
rattanay Legal | Last Updated: 12 May 2025
1. Introduction
rattanay Legal ("the firm", "we", "us") is committed to handling personal information responsibly and in accordance with applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy sets out how we collect, use, store, and protect personal data in connection with the legal services we provide and this website.
If you have a question about this policy or about how we handle your information, please contact us at [email protected].
2. Personal Data We Collect
We collect personal data in the following ways:
- Contact forms: When you submit an enquiry via this website, we collect your name, email address, and any telephone number or message you choose to provide.
- Client engagement: In the course of providing legal services, we collect information relevant to the matter including identity documents, estate details, correspondence, and other information you provide or that is provided with your authority.
- Cookies and analytics: This website may collect technical data about your visit, including pages viewed and browser type. See Section 5 for details.
Legal Basis and Retention
- Enquiry data: Processed on the basis of consent and legitimate interest. Retained for 12 months if no engagement follows.
- Client matter data: Processed on the basis of contractual necessity and legal obligation. Retained for 7 years following close of the matter, in accordance with Thai professional obligations.
- Website analytics: Processed on the basis of consent (where required). Retained for 26 months.
3. How We Use Personal Data
We use personal data for the following purposes:
- To respond to your enquiry and assess whether we are able to assist
- To deliver legal services where an engagement is agreed
- To correspond with you in the course of a matter
- To maintain client files and financial records as required by professional rules
- To comply with applicable Thai law and court obligations
- To improve this website through anonymous analytics
We do not sell personal data to third parties. We do not use client data for marketing purposes without separate consent. We do not share personal data with third parties except as required to deliver the services engaged (for example, to the Thai court system, to expert witnesses with your authority, or to government bodies as required by law).
4. How We Protect Personal Data
- Client files are held on password-protected systems with access restricted to the practitioner assigned to the matter.
- Data transmitted via this website is protected by TLS encryption.
- Access to client files is reviewed when team members leave or change roles.
- In the event of a data breach affecting your personal data, we will notify you as required under the PDPA, and will notify the Office of the PDPC where required by law.
5. Cookies
This website uses cookies to understand how it is used and to remember your preferences. Cookies are small text files stored on your device. You may accept or decline optional cookies when you first visit the site. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
6. Your Rights Under the PDPA
Under the Personal Data Protection Act B.E. 2562 (Thailand), you have the following rights in relation to your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to Erasure
You may ask us to delete personal data we hold, subject to our legal obligations to retain certain records.
Right to Object
You may object to certain uses of your data, including processing based on legitimate interest.
Right to Withdraw Consent
Where we rely on consent, you may withdraw it at any time. This does not affect processing already carried out.
Right to Lodge a Complaint
You may complain to the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.
7. Third-Party Links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies before submitting any personal data.
8. Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. The date at the top of this page will be updated to reflect any changes. If changes are material, we will notify active clients by email. Continued use of this website after changes are published constitutes acceptance of the updated policy.
10. Contact — Data Matters
For any question about this policy or about personal data we hold, please contact:
rattanay Legal
47 Surasak Road, Si Lom, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]
Telephone: +66 2 743 9582