Privacy Policy

1. Who We Are

The data controller is Preeya, a family legal practice located at 47 Loi Kroh Road, Chang Khlan, Chiang Mai 50100, Thailand. We are registered with and operate under the oversight of the Lawyers Council of Thailand, and we comply with the Thai Personal Data Protection Act B.E. 2562 (PDPA) in the collection and use of personal information.

2. What Information We Collect

We collect personal information only when you choose to provide it, or when it is necessary for us to deliver our services. This may include:

• Contact details — your name, email address, phone number, submitted via our website contact form or provided directly to us in person or by telephone.
• Correspondence — messages and communications you send to us, including by email.
• Engagement information — notes and records from consultations and meetings, relevant to the legal matter you have discussed with us.
• Technical data — browser type, IP address, pages visited, and other analytics data collected automatically via cookies when you use our website.

We do not collect special category data (such as health information or financial records) unless directly relevant to a legal matter you have engaged us on, and only with your explicit agreement.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and arrange appointments
• To provide and manage the legal services you engage us for
• To maintain accurate records of our engagement with you
• To comply with our professional and legal obligations as a registered legal practice
• To improve the quality and accessibility of our website and services

We do not use your information for unsolicited marketing. We will only contact you about our services if you have requested information or if we have an ongoing professional relationship.

4. Legal Basis for Processing

We process your personal data on the following grounds under the Thai PDPA: (a) Consent — where you have expressly agreed to our use of your data by submitting a contact form or engaging with our website; (b) Contractual necessity — where processing is required to fulfil our obligations under a service engagement; (c) Legitimate interest — where we have a genuine, proportionate interest in using data to improve our services and maintain professional records; and (d) Legal obligation — where we are required to retain or process data by law or professional regulation.

5. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected. Website enquiry data is held for up to 12 months unless you become a client. Matter-related records for active engagements are retained for a minimum of 7 years following the conclusion of the matter, in line with professional requirements. Analytics data is retained in anonymised or aggregated form only.

6. Data Protection Measures

We take the security of personal information seriously. Our measures include:

• Secure, encrypted storage for digital client records
• Restricted access — only the practitioners directly involved in your matter access your data
• Physical security of paper records held at our office
• Regular review of our data handling practices

In the event of a data breach that poses a significant risk to your rights, we will notify you and, where required, the relevant Thai authority without unnecessary delay.

7. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. We use essential cookies (required for the site to operate), analytics cookies (to understand usage patterns), and preference cookies (to remember your choices). You can manage your cookie preferences via our Cookie Policy page at any time.

8. Your Rights

Under the Thai PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request erasure of your data, subject to our legal and professional obligations
• Object to processing based on legitimate interest
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately. This policy applies only to Preeya and our own website.

10. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received information from a minor, please contact us and we will remove it promptly.

11. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review the policy periodically. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or requests, please contact our data contact point: