Privacy Policy

1. Introduction

Suphapha ("we", "us", "our") is a legal practice registered in Bangkok, Thailand. We take our responsibilities regarding personal data seriously, in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable professional obligations under the Lawyers Council of Thailand.

This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your own information. If you have questions, write to us at [email protected].

2. Personal Data We Collect

We collect only what is necessary for the service you are requesting or the enquiry you are making. This includes:

• Contact data: Full name, email address, telephone number — provided through our website contact form or by telephone.
• Case-related data: Information about family circumstances, assets, and legal matters you share with us during a consultation or engagement.
• Technical data: Browser type, pages visited, and time of visit — collected via cookies and server logs if analytics are enabled.

Legal basis: Contact and case data is processed on the basis of your consent or for the performance of a legal service contract. Technical data is collected on the basis of our legitimate interest in maintaining and improving our website.

Retention: Contact data from unanswered enquiries is deleted after 12 months. Client case files are retained for seven years following the close of a matter, as required by Thai professional regulations.

3. How We Use Your Data

• To respond to your enquiry and assess whether we are able to assist you
• To provide legal services you have engaged us to carry out
• To maintain client records and comply with professional and legal obligations
• To send service-related communications (updates on your matter, document requests)
• To improve our website and services (using aggregated, anonymised analytics data)

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or transfer your data to third parties for commercial use.

4. Data Protection Measures

We apply the following measures to protect your personal data:

• Encrypted storage for digital case files and client communications
• Physical documents held in locked, restricted-access facilities
• Access limited to practitioners directly involved in your matter
• Attorney-client privilege applies to all confidential communications

In the event of a data breach that affects your personal data, we will notify you within the timeframe required by Thai law.

5. Cookies

Our website uses cookies to support basic functionality and, where you have consented, to collect analytics data. You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under the Thai PDPA, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data.
• Right to erasure: You may request deletion of data no longer necessary for the original purpose, subject to our legal retention obligations.
• Right to object: You may object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Complaints may be directed to the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external sites such as the Thai court system or government databases. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

8. Minors

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data directly from minors. Where a minor's interests are involved in a case, data is collected from and managed through a responsible adult.

9. Policy Updates

We may update this policy from time to time. Any material changes will be communicated by updating the date at the top of this page. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.