Legal

Privacy Policy

Last updated: 7 July 2025

Baanrak ("we", "us", "our") is committed to protecting the personal data of all individuals who engage with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have in relation to your data. It applies to all clients, prospective clients, and visitors to our website at baanrak.world.

Our practice is based at 216 Thanon Rama IV, Khlong Toei, Bangkok 10110, Thailand. For data-related enquiries, please contact us at [email protected].

1. Information We Collect

We may collect the following categories of personal data:

Contact details: full name, email address, telephone number
Matter information: details of your family situation shared in consultation
Communication records: emails, messages, and notes from meetings
Website usage data: pages visited, time spent, referring pages (via analytics tools)
Cookie data: preferences stored locally in your browser

We collect personal data when you complete a contact form on our website, correspond with us by email or telephone, or attend a consultation.

2. Legal Basis for Processing

We process personal data on the following grounds under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA):

Contractual necessity: to perform legal services you have engaged us to provide
Legitimate interest: to manage enquiries, communicate with prospective clients, and maintain case records
Consent: where you have provided explicit consent, such as subscribing to communications
Legal obligation: to comply with applicable laws, including professional and tax obligations

3. How We Use Your Information

To respond to your enquiry and assess how we may assist you
To provide and manage legal services on your behalf
To maintain accurate records of your matter
To issue invoices and manage payments
To meet our professional and regulatory obligations
To improve the quality of our website and service

We do not use personal data for unsolicited direct marketing without your consent.

4. Data Retention

Client matter data is retained for a minimum of seven years following the conclusion of engagement, in accordance with professional standards and Thai statutory requirements. Website enquiry data not converted into an engagement is retained for twelve months. Analytics data is retained for twenty-four months.

5. Data Sharing

We do not sell or rent your personal data to third parties. We may share data in the following limited circumstances:

With courts, government agencies, or counterparties' legal representatives where required to conduct your matter
With our IT service providers under confidentiality obligations
Where required by Thai law or court order

6. Data Security

We take appropriate technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include secure email protocols, access controls on client files, and staff confidentiality training. In the event of a data breach that affects your rights, we will notify you promptly in accordance with the PDPA.

7. Cookies

Our website uses cookies to understand usage patterns and remember your preferences. You can manage or withdraw cookie consent at any time via our Cookie Policy page. Essential cookies required for basic site functionality cannot be disabled.

8. Third-Party Services

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their policies when you visit them.

9. Your Rights Under Thai PDPA

As a data subject, you have the following rights in relation to your personal data:

Right to access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate data
Right to erasure: to request deletion where there is no legal basis for continued retention
Right to restriction: to limit how we use your data in certain circumstances
Right to data portability: to receive your data in a structured, machine-readable format
Right to withdraw consent: where processing is based on consent, you may withdraw at any time
Right to complain: you may lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a minor, please contact us immediately.

11. International Transfers

Your personal data is stored and processed in Thailand. Where data is shared with service providers outside Thailand, we ensure appropriate safeguards are in place in accordance with the PDPA.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this document reflects the most recent revision. Continued use of our website or services following any update constitutes acceptance of the revised policy.

13. Contact

For any questions about this Privacy Policy or the personal data we hold:

Email: [email protected]
Address: 216 Thanon Rama IV, Khlong Toei, Bangkok 10110, Thailand