Privacy Policy

We collect personal data when you contact us through the website enquiry form, by email, or by telephone. This includes:

• Name and contact details (email address, telephone number)
• The content of any message or enquiry you send us
• Technical data collected automatically by the website (such as IP address, browser type, and pages visited) through analytics tools
• Cookie preferences and consent records (see Section 5)

We do not collect sensitive personal data through our website. Any information relating to your legal matter that you choose to share in an initial enquiry is treated as confidential from the moment it is received.

Legal basis: Processing of enquiry data is based on our legitimate interest in responding to requests for information. Where you become a client, processing is based on the contract between us. Analytical data processing is based on your consent.

Retention: Enquiry data is retained for up to 24 months. Website analytics data is typically retained for 26 months. Client matter data is subject to a separate retention policy under the client care agreement.

We use the personal data we collect for the following purposes:

• Responding to your enquiry and providing information about our services
• Carrying out legal services where you become a client
• Maintaining records of correspondence for reference and compliance
• Improving our website and understanding how visitors use it (using anonymised analytics data)
• Complying with legal or regulatory obligations applicable to a legal practice in Thailand

We do not use your personal data for automated decision-making or profiling. We do not send marketing communications without your explicit consent, and you can withdraw that consent at any time by contacting us at [email protected].

Third-party sharing: We may share data with third-party service providers who support the operation of our website (such as hosting and analytics providers). We do not sell personal data. We may be required to disclose information to regulatory or legal authorities in accordance with Thai law.

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted transmission of website data (HTTPS)
• Access controls limiting who within the Practice can access personal data
• Regular review of our data handling practices
• Secure storage of correspondence and client records

In the event of a data breach that poses a risk to individuals, we will take prompt action to assess and contain the breach and, where required by applicable law, notify the relevant authorities and affected individuals.

Our website and office are based in Thailand. If you contact us from outside Thailand, your data will be transferred to and processed in Thailand. Thailand's Personal Data Protection Act B.E. 2562 (PDPA) governs the protection of personal data held within Thailand.

Where we use third-party service providers based outside Thailand (for example, analytics platforms), we ensure that appropriate protections are in place and that any transfer is consistent with applicable data protection requirements.

Our website uses cookies to support its functionality and to understand how visitors use the site. We use the following categories of cookies:

• Essential cookies: Required for the website to function correctly (e.g. storing your cookie preferences).
• Analytics cookies: Used to understand how visitors navigate the site, enabling us to improve it. These are only active where you have consented.
• Preference cookies: Used to remember your settings and choices on the site.

You can review and update your cookie preferences at any time on our Cookie Policy page.

Under Thailand's Personal Data Protection Act and, where applicable, the GDPR, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To ask us to correct inaccurate or incomplete data
• Right to erasure: To ask us to delete your data where we no longer have a valid reason to hold it
• Right to portability: To request your data in a commonly used format
• Right to object: To object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our handling of your request, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

Data controller: Moradok Law

Address: 198 Chaeng Watthana Road, Lak Si, Bangkok 10210, Thailand

Privacy enquiries: [email protected]

We aim to respond to all privacy-related enquiries within 30 days.