Privacy Policy

1. Introduction

Sirimongkol ("the Firm", "we", "us") is a law firm practising in Bangkok, Thailand. We are committed to handling personal data responsibly and in accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what personal data we collect through our website and enquiry process, how we use it, and the rights individuals hold over it.

Questions about this policy should be directed to: [email protected]

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, telephone number, and the content of the message field.
• Cookies and analytics: Browser type, pages visited, session duration, and approximate location data collected via analytics tools. See our Cookie Policy for details.
• Email correspondence: Data contained in emails sent to us directly.

We do not collect sensitive categories of data (as defined under the PDPA) through our website. Legal matter data provided in the course of an engagement is handled under separate engagement-specific confidentiality obligations.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: For marketing communications and non-essential cookies, where you have given explicit consent.
• Legitimate interests: For responding to enquiries submitted through our contact form and for website analytics used to improve the site.
• Legal obligation: Where processing is required by Thai law, including professional obligations under the Lawyers Council of Thailand regulations.
• Contract: Where processing is necessary for the performance of a legal services engagement.

4. How We Use Your Data

• Responding to enquiries submitted via the contact form
• Assessing and managing conflicts of interest before opening a matter
• Communicating about legal services and engagement terms
• Improving the functionality and content of our website
• Complying with legal and regulatory obligations

We do not sell or share personal data with third parties for marketing purposes. We may share data with service providers who assist in operating our website (such as analytics providers) under data processing agreements that restrict their use of the data.

5. Data Retention

Contact form data and email correspondence is retained for a maximum of 24 months from the date of the last communication, unless an engagement is opened, in which case the engagement file retention period applies (minimum 7 years under Thai civil procedure). Analytics data is retained in aggregated form. Cookie preference data is retained as long as the cookie remains active on your device.

6. Data Protection Measures

• All data transmitted to our website is encrypted via TLS (HTTPS).
• Access to personal data held by the Firm is restricted to members of the engagement team on a needs basis.
• Email systems are accessed only via authenticated accounts with multi-factor authentication enabled.
• In the event of a data breach likely to affect your rights, we will notify the affected individuals and, where required under the PDPA, the Office of the Personal Data Protection Committee within 72 hours of becoming aware.

7. Cookies

Our website uses essential, analytics, and preference cookies. Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies are optional and are only set with your consent. Full details are available in our Cookie Policy.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to personal data we hold about you:

• Right of access: To request a copy of the personal data we hold about you.
• Right of rectification: To request correction of inaccurate or incomplete data.
• Right of erasure: To request deletion of personal data where we no longer have a lawful basis to hold it.
• Right to data portability: To request transfer of your data to another controller in a structured format, where technically feasible.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing conducted before withdrawal.
• Right to lodge a complaint: With the Office of the Personal Data Protection Committee (PDPC), the supervisory authority in Thailand.

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external resources, courts, or professional bodies. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies before submitting any personal data.

10. Children's Privacy

Our services are directed exclusively at businesses and individuals who have reached the age of majority (18 years) under Thai law. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will delete it promptly.

11. Policy Updates

This policy may be updated periodically to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of the website following any update constitutes acceptance of the revised policy.

12. Contact

Data controller: Sirimongkol
Address: 89 Charoen Nakhon Road, Khlong San, Bangkok 10600, Thailand
Privacy enquiries: [email protected]
Telephone: +66 2 962 4815