Privacy Policy

Introduction

thamrena is committed to protecting the privacy and personal information of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable data protection regulations.

By using our services or website, you agree to the collection and use of information in accordance with this policy. If you have questions about our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information Provided by You

When you contact us or engage our services, we may collect:

• Name and contact information (email address, phone number, mailing address)
• Business or company information if applicable
• Information relevant to your legal matter or consultation
• Documentation and records related to our legal services

Information Automatically Collected

When you visit our website, we may automatically collect:

• Browser type and version
• Device information and operating system
• IP address and general location data
• Pages visited and time spent on our website
• Referring website or source

Legal Basis for Processing

We process your personal data based on consent (when you contact us or use our services), contractual necessity (to provide legal services you have engaged us for), legitimate interests (to improve our services and communicate relevant information), and legal obligations (compliance with Thai Bar requirements and legal professional standards).

How We Use Your Information

We use collected information for the following purposes:

• To provide legal advisory services and consultations
• To communicate with you regarding your legal matters
• To respond to your inquiries and requests
• To maintain client records and case files in accordance with professional requirements
• To send periodic updates on legal developments relevant to your situation (with your consent)
• To improve our website and services
• To comply with legal and regulatory obligations
• To prevent fraud and ensure security

Data Retention

We retain personal information for different periods depending on the purpose:

• Client files and case records: Retained for 10 years following completion of services, in accordance with Thai Bar professional requirements
• Contact form inquiries: Retained for 2 years or until the inquiry is resolved
• Website analytics data: Retained for 2 years
• Marketing communications: Retained until you unsubscribe or withdraw consent

After retention periods expire, we securely delete or anonymize personal information unless longer retention is required by law.

Information Sharing and Disclosure

Third-Party Service Providers

We may share information with trusted service providers who assist us in operating our business:

• Website hosting and maintenance providers
• Email communication platforms
• Document storage and management systems
• Analytics services (e.g., Google Analytics)

These service providers are contractually bound to maintain confidentiality and use data only for specified purposes.

Legal Requirements

We may disclose personal information when required by law, court order, or government regulation, or when necessary to protect our legal rights or those of others.

No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Data Security

We implement appropriate technical and organizational measures to protect personal information:

• Secure server infrastructure with SSL/TLS encryption
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Secure document storage with encryption at rest
• Employee training on data protection and confidentiality
• Incident response procedures for potential data breaches

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. We use the following types:

• Essential Cookies: Necessary for basic website functionality and security
• Analytics Cookies: Help us understand how visitors use our website (optional)
• Preference Cookies: Remember your settings and preferences (optional)

You can manage cookie preferences through your browser settings or our cookie consent tool. For more information, please see our Cookie Policy.

Your Rights

Under Thai data protection law, you have the following rights:

• Right to Access: Request copies of your personal information we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that some rights may be limited by legal obligations, particularly regarding client file retention requirements.

International Data Transfers

Your personal information is primarily processed and stored in Thailand. If we transfer data internationally (for example, to cloud service providers with servers outside Thailand), we ensure appropriate safeguards are in place to protect your information in accordance with Thai data protection requirements.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you have concerns about our data protection practices that we have not adequately addressed, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) in Thailand or other relevant supervisory authority.