Privacy Policy

1. Data Controller

The data controller is Tawan Law, located at 142 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand. We are responsible for the personal data we collect and process in connection with this website and our legal services.

2. Personal Data We Collect

We collect personal data in the following ways:

When you contact us or submit the website form:

• Full name
• Email address
• Phone number (if provided)
• The content of your message or enquiry

Automatically through website use:

• IP address and approximate location
• Browser type and device information
• Pages visited and time on site (analytics cookies, if consented)

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries — to reply to messages submitted through our website or by email.
• Providing legal services — to carry out the services you engage us for, including consultations, administration, and case handling.
• Legal obligations — to comply with Thai law, including anti-money laundering requirements applicable to legal practitioners.
• Website improvement — to understand how this site is used and make it more useful (analytics only, with consent).

We do not send marketing communications unless you have explicitly asked to receive them. We do not sell or share personal data with third parties for commercial purposes.

4. Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process personal data on the following bases:

• Consent — for analytics cookies and any optional communications.
• Contract — where processing is necessary to provide the legal service you have engaged us for.
• Legitimate interests — for responding to initial enquiries and operating the website securely.
• Legal obligation — where Thai law requires us to retain or process certain data.

5. How Long We Keep Your Data

• Enquiry data where no engagement follows: up to 12 months.
• Client file data: 7 years from the close of matter, in line with Thai professional regulations.
• Analytics data: up to 26 months, subject to cookie consent.

6. Third-Party Services

We may share data with the following categories of third parties, where necessary:

• Government departments and courts (in connection with legal proceedings)
• Analytics providers (Google Analytics, with consent)
• Email and communication service providers

We do not transfer personal data outside Thailand except where required by law or explicitly consented to.

7. How We Protect Your Data

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure, access-controlled storage of client files
• Restricted internal access to personal data on a need-to-know basis
• Legal professional privilege protecting client communications
• HTTPS encryption for this website

8. Cookies

This website uses cookies. Essential cookies are required for basic operation. Optional cookies (analytics, preferences) are only set with your consent. For full details, please see our Cookie Policy.

9. Your Rights Under the Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights:

• Right to access — to request a copy of personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate data.
• Right to erasure — to request deletion of personal data where no legal basis remains.
• Right to data portability — to receive your data in a structured format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time, for consent-based processing.

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You may also raise a complaint with the Personal Data Protection Committee of Thailand.

10. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through this website, please notify us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The current version will always be published on this page with an updated effective date. Continued use of the website after any changes constitutes acceptance of the updated policy.