Privacy Policy

1. Introduction

Tham Sakdi ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy describes what personal information we collect, how we use it, the legal basis on which we process it, and the rights available to individuals regarding their data.

This policy applies to all personal data collected through our website at thamsakdies, through our contact forms, and through the direct provision of legal advisory services. Questions regarding this policy may be directed to privacy@thamsakdies.

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, position or role
• Contact data: email address, telephone number, business address
• Enquiry data: details of legal matters submitted through our contact form
• Technical data: IP address, browser type, pages visited, session duration — collected via analytics cookies where consent has been given
• Communication data: records of correspondence with our firm

We do not collect special categories of personal data (such as health, biometric, or financial account data) unless specifically required for and relevant to a legal matter you have engaged us on.

3. How We Use Personal Data

Personal data is used for the following purposes:

• Responding to enquiries submitted through our website
• Providing the legal advisory services you have engaged us for
• Maintaining records required by professional obligations
• Improving the functionality and content of our website
• Complying with applicable Thai legal and regulatory obligations

We do not use personal data for unsolicited marketing, and we do not sell or transfer personal data to third-party marketing services.

4. Legal Basis for Processing

We process personal data on the following legal bases under the Personal Data Protection Act B.E. 2562 (PDPA) and applicable frameworks:

• Consent: where you have provided explicit consent, such as through cookie preferences
• Contractual necessity: where processing is required to deliver services you have requested
• Legitimate interests: for operational and administrative purposes where these do not override your rights
• Legal obligation: where we are required to process data to comply with Thai law

5. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy, or as required by applicable law. As a general guide:

• Enquiry data not converted to an engagement: retained for up to 12 months
• Client engagement records: retained for a minimum of 7 years following engagement close, in accordance with professional obligations
• Website analytics data: retained for up to 26 months

6. Data Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or loss. These include access controls, secure document storage, and staff obligations regarding data confidentiality. In the event of a data breach affecting your rights and freedoms, we will notify you as required under applicable law.

7. Cookies

Our website uses cookies to improve functionality and, where consented to, to gather analytics data. Full details of the cookies we use and how to manage your preferences are available in our Cookie Policy. You may withdraw cookie consent at any time without affecting the lawfulness of prior processing.

8. Third-Party Services

We may use the following third-party services that process data on our behalf:

• Google Analytics — website usage analytics (analytics cookies, where consented)
• Email service providers — for managing correspondence

We do not share personal data with third parties for their own marketing purposes. Where third parties process data on our behalf, they are subject to appropriate data processing agreements.

9. Your Rights

Under the PDPA and applicable law, you have the following rights regarding your personal data:

• Right of access: to request a copy of personal data we hold about you
• Right of rectification: to request correction of inaccurate data
• Right of erasure: to request deletion of data, subject to legal retention obligations
• Right to restrict processing: in certain circumstances
• Right to data portability: to receive data in a structured, commonly used format
• Right to withdraw consent: at any time where processing is based on consent
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at privacy@thamsakdies.

10. Children's Privacy

Our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will update the "Last Updated" date at the top of this document. Continued use of our website or services following an update constitutes acceptance of the revised policy.

12. Contact Information

Data Controller: Tham Sakdi
Address: 120/5 Wireless Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand
Email: privacy@thamsakdies
Telephone: +66 2 251 6743