Privacy Policy

1. Who We Are

Krua Chambers is a family law practice registered and operating in Thailand. Our principal office is at 103 Thanon Tha Phae, Mueang, Chiang Mai 50100, Thailand. We are the data controller for all personal information collected through our website and in connection with our legal services. We operate in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand.

2. Personal Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, phone number, and any information you include in your message.
• Phone and email enquiries: name, contact details, and case-related information you provide.
• Client engagement: identification documents, family and legal details necessary to provide our services.
• Website analytics: anonymised usage data via cookies (see our Cookie Policy).

We do not collect sensitive personal data beyond what is strictly necessary for the legal matter at hand, and we never collect financial information through our website.

3. Legal Basis for Processing

Under the PDPA, we rely on the following lawful bases:

• Consent: for website cookies and marketing communications, where you have actively opted in.
• Contract performance: where processing is necessary to provide the legal services you have engaged us for.
• Legitimate interests: for responding to enquiries and improving our services, where these interests do not override your rights.
• Legal obligation: where Thai law requires us to retain or disclose certain information.

4. How We Use Your Data

• Responding to enquiries and arranging consultations
• Delivering the legal services you have engaged us to provide
• Sending case updates and correspondence related to your matter
• Maintaining records required by Thai legal professional obligations
• Improving our website and understanding how visitors use it (analytics, anonymised)
• Sending occasional service-related communications, where you have consented

We do not sell, rent, or trade personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Enquiry data (non-client): up to 12 months from last contact
• Client matter files: 7 years from completion, as required under Thai professional rules
• Website analytics: anonymised data retained for up to 26 months

After these periods, data is securely deleted or anonymised.

6. Data Protection Measures

• All electronic files are stored on password-protected systems with restricted access
• Physical documents are kept in locked storage accessible only to authorised staff
• Our website uses HTTPS encryption for all data transmitted through contact forms
• Staff are trained in data protection obligations under the PDPA
• In the event of a data breach that may affect your rights, we will notify you and the relevant authority within the timeframes required by Thai law

7. Cookies

Our website uses cookies to maintain functionality and, where you have consented, to understand how the site is used. Essential cookies are always active. Optional analytics and marketing cookies are only placed with your consent via our cookie banner. For full details, please read our Cookie Policy.

8. Your Rights Under the PDPA

As a data subject under Thai law, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data where we no longer have a lawful basis to hold it.
• Right to restrict processing: ask us to pause processing in certain circumstances.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: you may submit a complaint to the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. Once you leave our site, this policy no longer applies. We encourage you to review the privacy practices of any external sites you visit.

10. Children's Privacy

Our services are directed at adults (18 years and over). We do not knowingly collect personal data from individuals under 18 through our website. If we become aware that we have inadvertently done so, we will delete such data promptly.

11. Policy Updates

We may update this policy from time to time. Where changes are material, we will notify existing clients by email. Continued use of our website after any update constitutes acceptance of the revised policy. The "Last Updated" date at the top of this page reflects the most recent version.

12. Contact for Data Matters

For any data protection questions, requests, or concerns: