Privacy Policy
Last Updated: 10 April 2025 | Garuda Legal, Bangkok, Thailand
1. Introduction
Garuda Legal ("we", "us", "our") is a legal practice registered in Bangkok, Thailand, providing pension protection counsel. We are committed to handling the personal data of clients, enquirers, and website visitors with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to that data. If you have questions about any part of this policy, please contact us at [email protected].
2. Data We Collect
Information you provide directly
- Name, email address, and telephone number submitted through our contact form
- Pension documents, correspondence, and employment records shared during a consultation or in preparation for one
- Information discussed or provided verbally during a consultation, recorded in written summaries
- Identification documents provided for verification purposes
Information collected automatically
- Standard server log data, including IP address, browser type, and pages visited
- Cookie data as described in our Cookie Policy
- Analytics information about how visitors interact with our website (if analytics cookies are accepted)
Legal basis for processing
- Contract performance: processing necessary to provide the legal services you engage us for
- Legitimate interests: responding to enquiries, improving our services, maintaining records
- Consent: sending optional communications; use of non-essential cookies
- Legal obligation: compliance with Thai professional and regulatory requirements for legal practitioners
3. How We Use Your Data
- To respond to enquiries and arrange consultations
- To provide and document the legal services you engage us for
- To prepare written summaries, court filings, and correspondence on your behalf
- To coordinate with third-party specialists (medical, actuarial, employment) when required by your matter
- To comply with professional obligations under the Lawyers Council of Thailand
- To improve our website and understand how it is used (analytics, only with consent)
- We do not use your data for unsolicited marketing and do not sell or trade personal data
4. Data Sharing
We share personal data only when necessary and with parties bound by appropriate confidentiality obligations:
- Expert witnesses and specialists: medical professionals, actuaries, or employment historians engaged for your matter
- Notaries and official bodies: when required to process form changes or court filings
- IT service providers: for website hosting and email; operating under data processing agreements
- Regulatory and professional bodies: when required by law or our professional obligations
We do not share data with advertisers, data brokers, or unrelated third parties.
5. Data Retention
- Contact enquiry data not resulting in an engagement: 12 months
- Client matter files: 7 years from completion of the matter (in line with professional regulatory requirements)
- Website analytics data: 26 months from collection
- Cookie consent records: 13 months
6. Data Protection
- Physical client files are stored in locked cabinets accessible only to assigned legal team members
- Digital files are encrypted at rest and in transit using current industry-standard protocols
- Access to client data systems is restricted by role and subject to access controls
- In the event of a data breach, we will notify affected individuals and the relevant supervisory authority within the timeframes required by the PDPA
- We conduct periodic reviews of our data security practices
7. Cookies
Our website uses cookies to maintain basic functionality and, with your consent, to understand how the site is used. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
8. Your Rights Under the PDPA
Under Thailand's Personal Data Protection Act, you have the following rights:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your data in certain circumstances
- Restriction: ask us to restrict processing in certain circumstances
- Portability: receive your data in a structured, commonly used format
- Objection: object to processing based on legitimate interests
- Withdrawal of consent: where processing is based on consent, withdraw it at any time
- Complaint: lodge a complaint with the Personal Data Protection Committee of Thailand
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Third-Party Links
Our website may contain links to external websites, including those of courts, government bodies, or professional associations. We are not responsible for the privacy practices of those websites and encourage you to review their policies separately.
10. Children's Privacy
Our services are intended for individuals aged 18 and over. We do not knowingly collect data from persons under 18. If we become aware that we hold data relating to a minor, we will delete it promptly unless required by law to retain it.
11. Changes to This Policy
We may update this policy from time to time. The current version will always be available on our website. For significant changes, we will notify active clients directly. Continued use of our website following a policy update constitutes acceptance of the revised terms.
12. Contact Us
For any privacy-related questions, requests, or concerns:
- Email: [email protected]
- Post: Garuda Legal, 78 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand
- Telephone: +66 2 957 4823
The data controller for personal data processed in connection with this website and our legal services is Garuda Legal, Bangkok, Thailand.