Privacy Policy

Introduction

Erawan Law is committed to protecting the privacy and personal information of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and other applicable data protection regulations.

By using our services or visiting our website, you agree to the collection and use of information in accordance with this policy. If you have questions about our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information

We collect personal information that you provide directly to us when you:

• Contact us through our website form or email
• Schedule a consultation or engage our services
• Correspond with us regarding legal matters
• Subscribe to our newsletter or communications

This information may include: name, email address, phone number, mailing address, business information, and details about your legal matter or inquiry.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

• IP address and general location information
• Browser type and version
• Pages visited and time spent on our site
• Referring website or source

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide legal services, respond to inquiries, and communicate about your matter
• Client Communication: To send important updates, appointment reminders, and information relevant to your legal matters
• Website Improvement: To analyze site usage and improve our website functionality and user experience
• Legal Compliance: To comply with applicable laws, regulations, and professional obligations
• Marketing: With your consent, to send newsletters or information about our services

Legal Basis for Processing

We process your personal data based on: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, or (4) legitimate interests in operating our law practice and communicating with clients and prospective clients.

Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist with website hosting, email services, or practice management (under strict confidentiality agreements)
• Legal Authorities: When required by law, court order, or to protect our legal rights
• Professional Consultants: Other legal professionals or experts when necessary for your representation (with your consent)

All third parties are required to maintain the confidentiality of your information and use it only for the purposes for which we disclose it to them.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure socket layer (SSL) encryption for data transmission
• Restricted access to personal information on a need-to-know basis
• Regular security assessments and updates
• Secure storage systems with access controls
• Staff training on data protection and confidentiality

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Client matter files are retained for 7 years after case closure, as required by Thai Bar Association rules
• General inquiry information is retained for 2 years
• Marketing communications data is retained until you withdraw consent
• Website analytics data is typically retained for 26 months

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and your choices, please review our Cookie Policy.

Your Rights

Under Thailand's Personal Data Protection Act and other applicable laws, you have the following rights:

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your personal information for certain purposes
• Right to Withdraw Consent: Withdraw consent for data processing where consent was the legal basis
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee if you believe your rights have been violated

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to clients and subscribers (for significant changes)

Your continued use of our services after the effective date of changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: