Privacy Policy

1. Introduction

Sukhothai Law ("we", "us", "our") is a legal practice based at 47 Thanon Charodvithithong, Mueang, Sukhothai 64000, Thailand. We are committed to handling personal information with the same care and discretion we bring to every client matter. This policy explains what information we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to information collected through our website, our enquiry forms, and direct communications with us. It is governed by the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA) and general principles of Thai law applicable to data handling by legal services providers.

2. What Personal Data We Collect

We collect the following categories of personal information:

• Full name and preferred form of address
• Email address
• Telephone number (where provided)
• General description of your enquiry or matter (where provided in your message)
• Technical information from website visits: IP address, browser type, pages viewed, and cookies (where consent is given)

We do not collect sensitive personal data (such as financial account details or government ID numbers) through our website. Sensitive information relevant to your legal matter is collected and handled separately under strict professional confidentiality obligations.

3. How We Collect Data

Data is collected through the following means:

• Enquiry forms on our website when you submit a contact request
• Email and telephone when you contact us directly
• Cookies and analytics tools when you browse our website (only with your consent)

4. Legal Basis for Processing

We process personal data on the following legal grounds under the PDPA:

• Consent — for cookies and non-essential communications
• Contractual necessity — to respond to your enquiry and deliver services you request
• Legitimate interest — to improve our services and maintain secure, functional website operations
• Legal obligation — where required by Thai law or court order

5. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries and scheduling consultations
• Delivering the legal services you request
• Sending written summaries and case communications
• Improving the functionality and content of our website
• Complying with legal and professional obligations

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

6. Data Sharing

We may share personal data in the following limited circumstances:

• With courts and government bodies — where required by your case or by law
• With professional referral partners — only with your explicit consent and only where your matter exceeds our scope
• With our service providers — such as secure document storage or communication tools, subject to data processing agreements

We do not share client information with advertising networks, social media platforms, or data brokers.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by professional legal obligations. As a general guide:

• Enquiry data not leading to engagement: deleted within 6 months
• Client matter files: retained for 7 years following case closure, in line with Thai legal professional standards
• Website analytics data: retained for up to 14 months, then aggregated or deleted

8. Cookie Information

Our website uses cookies to improve functionality and understand how visitors use our pages. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies required for the website to function cannot be disabled.

9. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include access controls on client files, secure encrypted communications where possible, and staff training on data handling obligations under the PDPA. In the event of a data breach that poses a risk to your rights, we will notify you and the Office of the Personal Data Protection Committee as required by law.

10. Your Rights Under Thai PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where there is no lawful basis for continued processing
• Right to data portability — receive your data in a portable format where technically feasible
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — at any time, where processing is based on consent
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee, Thailand

To exercise any of these rights, please contact us at [email protected].

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and recommend reviewing their privacy policies before sharing any personal information.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18 through our website. If you believe a minor has submitted data through our enquiry form, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes have been posted constitutes acceptance of the revised policy.

14. Contact for Data Enquiries

For any questions or requests relating to this privacy policy or your personal data, please contact: