Privacy Policy
Last Updated: 12 May 2025 | Effective Date: 12 May 2025
1. Introduction
Ayutthaya Counsel ("the firm", "we", "us", "our") is committed to handling personal data with care and in accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it.
This Policy applies to personal data collected through our website, our contact form, and in connection with the legal services we provide. If you have questions about this Policy or how we handle your data, you may contact us at [email protected].
2. Personal Data We Collect
We collect personal data in the following ways:
Through our website contact form: When you submit an enquiry, we collect your name, email address, and any optional information you provide, including a telephone number and your message.
In the course of providing legal services: We collect information relevant to your matter, which may include your full name, identification documents, contact details, family information, financial information, and documents relating to the estate or matter at hand.
Through cookies and analytics tools: Our website uses essential cookies and may use analytics cookies to understand how the site is used. Please see our Cookie Policy for details.
Legal basis for processing: We process personal data on the basis of consent (for website enquiries and non-essential cookies), contract (for legal service delivery), and legitimate interest (for improving our services and maintaining records). Where we rely on consent, you may withdraw it at any time.
Retention: Website enquiry data is retained for up to twelve months. Client matter files are retained for seven years following the conclusion of the matter, in accordance with professional obligations.
3. How We Use Personal Data
Personal data collected through the website is used to respond to your enquiry and, where an engagement proceeds, to manage the legal matter. Specifically, we use personal data to:
- Respond to enquiries and provide pre-engagement advice
- Carry out and administer legal services
- Prepare and submit required legal documents
- Communicate with relevant courts, government departments, and financial institutions on your behalf
- Maintain required professional records
- Comply with legal and regulatory obligations
We do not use personal data for marketing purposes without express consent. We do not sell or transfer personal data to third parties for commercial purposes.
Third-party sharing: Data may be shared with courts, government agencies (including the Land Department and the Revenue Department), financial institutions, and other parties as required in the course of your matter. Where analytics software is used on our website, data may be processed by that provider subject to their own privacy practices.
4. Data Protection Measures
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:
- Secure document storage for physical and digital files
- Access restricted to authorised members of the firm
- Encrypted transmission for electronic communications containing personal data
- Regular review of data security practices
In the event of a personal data breach that is likely to result in harm to data subjects, we will notify affected individuals and, where required by the PDPA, the relevant supervisory authority within the timeframes specified by law.
5. Cookies
Our website uses essential cookies required for basic functionality (such as storing your cookie consent preference). We may also use analytics cookies to understand how visitors use our site. You can manage your cookie preferences through the banner displayed on your first visit, or through our Cookie Policy page.
6. Your Rights
Under the PDPA, you have the following rights in relation to personal data we hold about you:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate or incomplete data.
- Right to erasure: In certain circumstances, you may request that we delete your personal data.
- Right to data portability: Where applicable, you may request your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interest in certain circumstances.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You may lodge a complaint with the Personal Data Protection Committee of Thailand if you believe we have processed your data unlawfully.
To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframes required under applicable law.
7. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies independently.
8. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 through our website. If we become aware that personal data of a minor has been submitted without appropriate parental consent, we will delete it.
9. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be communicated through a notice on our website. The date of the most recent revision is shown at the top of this page. Continued use of our website or services following a change constitutes acceptance of the updated policy.
10. Contact
Data Controller: Ayutthaya Counsel
Address: 31 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
Privacy enquiries: [email protected]
Telephone: +66 2 247 86 59