Legal Documents
Privacy Policy
Last Updated: 15 May 2025
1. Introduction
Baan Legal ("we", "us", "our") is committed to protecting the personal information of those who contact us or use our services. This policy describes how we collect, use, and protect personal data in the course of providing family law services in Hat Yai, Thailand.
This policy applies to all personal data we process in connection with our website and professional services. If you have questions about this policy, please contact us at [email protected].
2. Data Controller
The data controller for the purposes of this policy is:
- Baan Legal
- 123/7 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
- Email: [email protected]
3. What Personal Data We Collect
We may collect the following categories of personal data:
- Contact details: name, email address, phone number
- Communication content: information you share in enquiry forms or correspondence
- Service-related information: details of your family situation shared during consultations
- Website usage data: browser type, pages visited, visit duration (via analytics cookies where consented)
We do not collect sensitive personal data (such as health information) via our website. Any sensitive information relevant to your legal matter is shared directly with your assigned practitioner under professional privilege.
4. How We Collect Data
- Contact forms on this website
- Direct email or telephone correspondence
- In-person consultations
- Cookies and analytics tools (where consent has been given — see our Cookie Policy)
5. Legal Basis for Processing
We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):
- Consent: for non-essential cookies and marketing communications
- Contractual necessity: to provide legal services you have requested
- Legitimate interest: to respond to enquiries and improve our services
- Legal obligation: where we are required by law to process or retain data
6. How We Use Your Data
- To respond to your enquiries and arrange appointments
- To provide the family law services you have requested
- To send service-related communications
- To comply with our professional and legal obligations
- To improve our website and services (using aggregated, anonymised analytics)
We do not sell personal data to third parties. We do not use your data for unsolicited marketing without your explicit consent.
7. Data Sharing
We may share data with:
- Relevant courts and official bodies, where required by law or by the nature of your matter
- Trusted IT service providers who process data on our behalf under data processing agreements
- Other parties where you have specifically consented or instructed us to do so
All third-party processors are required to maintain appropriate data protection measures.
8. Data Retention
We retain personal data only as long as necessary:
- Enquiry data: up to 12 months if no engagement follows
- Client matter files: 7 years from the date of matter closure, in line with Thai professional record-keeping requirements
- Website analytics data: 26 months (aggregated)
9. Data Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include:
- Encrypted email communications for sensitive matters
- Restricted internal access to client files
- Secure storage of physical documents
- Regular review of access controls
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with PDPA requirements.
10. Cookies
We use cookies on this website. Essential cookies are necessary for the website to function. Analytics and preference cookies are used only with your consent. For full details, please see our Cookie Policy.
11. Your Rights Under Thailand PDPA
As a data subject under Thailand's PDPA, you have the following rights:
- Right to access: request a copy of personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion where data is no longer necessary
- Right to data portability: receive your data in a structured, commonly used format
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: withdraw consent at any time (does not affect prior processing)
- Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC Thailand)
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
12. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
13. Children's Privacy
Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this policy periodically. The "Last Updated" date at the top will reflect the most recent revision. Continued use of our services after an update constitutes acceptance of the revised policy. For significant changes, we will notify active clients directly.
15. Contact for Privacy Matters
For any questions, requests, or concerns about this policy or our data practices:
- Email: [email protected]
- Address: 123/7 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
- Phone: +66 2 461 8927