Privacy Policy

1. Introduction

Panya Law ("we", "us", "our") is committed to protecting the personal information you share with us. This policy explains what data we collect, how we use it, how we protect it, and the rights you hold under Thai law.

This policy applies to all personal data collected through our website at panyalaw.cyou, through direct contact by phone or email, and in the course of providing legal services. Please read it carefully. If you have questions, contact us at [email protected].

2. Data We Collect

2.1 Information You Provide

• Contact form submissions: name, email address, phone number (optional), and message content.
• Direct correspondence: information included in emails, phone calls, or letters you send us.
• Service engagement: personal details, identification, and case-related information provided during the course of legal instructions.

2.2 Information Collected Automatically

• Website usage data via analytics cookies (if consent is given): pages visited, time on site, device type.
• IP address and browser information (standard server logs, retained for up to 30 days).

2.3 Legal Basis for Processing

• Consent: for marketing communications and optional analytics cookies.
• Contract performance: for processing data necessary to deliver legal services you have engaged us to provide.
• Legitimate interests: for responding to enquiries, improving our website, and maintaining records of client interactions.
• Legal obligation: where retention of data is required by Thai law, including professional conduct obligations.

2.4 Retention Periods

• Client matter files: retained for 7 years following conclusion of the matter, in accordance with Thai professional standards.
• Contact form enquiries that did not proceed to instruction: retained for 12 months.
• Analytics data: retained for up to 14 months, then aggregated.

3. How We Use Your Data

• To respond to your enquiry and provide the legal services you have requested.
• To communicate with you about your matter, including updates, documents, and billing.
• To comply with our professional and legal obligations under Thai law.
• To improve the performance and content of our website (analytics, with consent).
• We do not sell, rent, or trade personal data to any third party for marketing purposes.

3.1 Data Sharing

We may share personal data with: courts and public bodies as required in the course of legal proceedings; translators or co-counsel engaged to assist with your matter (subject to confidentiality obligations); and IT service providers who host or maintain our systems (subject to data processing agreements). We do not share data with advertising networks.

4. Data Protection Measures

• Client files and correspondence are stored on password-protected systems with restricted access.
• Physical documents are stored securely on-premises and disposed of confidentially when no longer needed.
• Email correspondence involving sensitive personal information is handled with care; we advise clients to use encrypted channels for particularly sensitive communications if they wish.
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under Thai law.

5. Cookies

We use essential cookies to maintain basic website functionality, and optional analytics and preference cookies with your consent. For full details, see our Cookie Policy. You can manage your preferences at any time through the cookie settings on this site.

6. Your Rights Under Thai Law (PDPA)

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data where there is no lawful basis for continued retention.
• Portability: to receive your data in a structured, commonly used format where technically feasible.
• Objection: to object to processing based on legitimate interests.
• Withdrawal of consent: to withdraw consent for optional processing at any time without affecting processing carried out before withdrawal.
• Complaint: to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may include links to external resources. We are not responsible for the privacy practices of those websites and encourage you to review their policies directly.

8. Children's Privacy

Our services are intended for persons aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be posted on this page with a revised effective date. Continued use of our website following an update constitutes acceptance of the revised policy.

10. Contact

Data Controller: Panya Law
110 Phuket Road, Talat Yai, Phuket 83000, Thailand
Email: [email protected]
Phone: +66 76 341 285