Legal Documentation
Privacy Policy
Section 01
Introduction
yutithaq ("the firm", "we", "us") is a legal practice registered in Thailand, operating from 89/2 Sathorn Tai Road, Thung Maha Mek, Sathon, Bangkok 10120. This privacy policy sets out the basis on which any personal data the firm collects — or that is provided to the firm — will be processed.
The firm is committed to handling personal information with care, in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand. This policy applies to all personal data collected through the firm's website, contact forms, telephone enquiries, and the provision of legal services.
Please read this policy carefully. If you have questions about how the firm handles your personal data, contact details are provided in Section 10.
Section 02
Data We Collect
The firm collects personal data through several channels, including the contact form on this website, telephone enquiries, and direct correspondence. The categories of data collected include:
| Category | Examples | Basis |
|---|---|---|
| Identity | Full name, title | Contract / Consent |
| Contact | Email address, phone number | Contract / Consent |
| Case Details | Pension decision details, relevant documents | Contract / Legal obligation |
| Technical | IP address, browser type, pages visited | Legitimate interest |
| Communications | Enquiry messages, correspondence | Consent / Legitimate interest |
The firm retains personal data for no longer than is necessary for the purposes described in this policy. Client matter files are retained for a period of seven years following conclusion of the matter, in accordance with standard professional practice. Website enquiry data is held for up to two years unless the enquiry proceeds to a formal instruction.
Section 03
How We Use Your Data
Personal data collected by the firm is used only for defined, lawful purposes. The firm does not sell personal data to third parties, and does not use personal data for unsolicited marketing without consent.
-
Service delivery. To respond to enquiries, conduct legal reviews, prepare submissions, and provide representation as instructed by the client.
-
Communication. To keep clients and enquirers informed about the progress of their matter and any relevant developments.
-
Legal and regulatory compliance. To meet obligations imposed by Thai law, court rules, and professional conduct standards.
-
Website improvement. Anonymised technical data is used to understand how the website is used and to improve the experience it offers.
-
Billing and administration. To issue invoices, record receipts, and maintain accurate financial records as required by Thai accounting law.
Section 04
Data Protection Measures
The firm takes the security of personal data seriously and has put in place technical and organisational measures appropriate to the level of risk:
Encryption
All data transmitted between your browser and the firm's servers is encrypted using TLS. Stored personal data is protected by access controls and encrypted at rest where appropriate.
Access Controls
Access to personal data within the firm is limited to personnel who require it for the purposes described above. All staff are trained in data protection obligations.
Breach Response
In the event of a personal data breach, the firm will notify affected individuals and the relevant supervisory authority within the timeframes required by the PDPA.
Regular Review
Security measures and data handling procedures are reviewed periodically to ensure they remain appropriate as circumstances and technology change.
Section 06
Your Rights
Under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights in relation to personal data the firm holds about you:
Right of Access
You may request confirmation of whether the firm holds personal data about you, and a copy of that data in a readable format.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete data held by the firm.
Right to Erasure
You may request deletion of personal data where there is no longer a lawful basis for its retention, subject to any overriding legal obligations.
Right to Data Portability
You may request that personal data provided by you to the firm be transferred to another organisation, where technically feasible.
Right to Object
You may object to processing based on legitimate interests. The firm will cease such processing unless it can demonstrate compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you consider that the processing of your personal data infringes the PDPA.
To exercise any of these rights, please contact the firm using the details provided in Section 10. Requests will be acknowledged within seven working days and resolved within thirty days unless the matter is particularly complex.
Section 07
Third-Party Services and Links
The firm may share personal data with the following categories of third party, where necessary:
-
Courts and public authorities. Where required by law or court order in connection with legal proceedings.
-
Expert witnesses and consultants. Where instructed by the client and necessary for the conduct of a matter.
-
IT and hosting providers. Who provide secure infrastructure for the website and practice management systems. Such providers are bound by data processing agreements.
-
Analytics services. Anonymised or aggregated data may be shared with analytics platforms to support website improvement. No personally identifiable information is transferred in this context without consent.
This website may contain links to external sites. The firm is not responsible for the privacy practices of those sites and recommends reviewing their privacy policies independently.
Section 08
Children's Privacy
The firm's services are intended for adults aged 20 or over (the age of majority under Thai law). The firm does not knowingly collect personal data from persons below this age. If you believe that personal data of a minor has been provided to the firm in error, please contact us at the address in Section 10 and the data will be deleted.
Section 09
Changes to This Policy
This policy may be updated from time to time to reflect changes in the law, the firm's practices, or the services offered. The revised policy will be published on this page with an updated date. Continued use of the website after a material change constitutes acknowledgement of the updated policy. For significant changes, the firm may provide additional notice by email where a client relationship exists.
Section 10
Contact the Data Controller
For any questions about this policy, to exercise your rights, or to raise a concern about how personal data is handled, please contact the firm:
Data Controller
yutithaq
Address
89/2 Sathorn Tai Road, Thung Maha Mek, Sathon, Bangkok 10120, Thailand
Data Enquiries Email
[email protected]Telephone
+66 2 167 8423