Privacy Policy

1. Who we are

Phukphan is a family legal practice based at 28 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand. For data-related enquiries, contact us at [email protected] or by telephone at +66 53 218 760.

2. What personal data we collect

We may collect the following categories of personal information:

• Name and contact details (email address, telephone number, postal address)
• Information about your family situation and the legal matter you wish to discuss
• Correspondence sent to us by email, contact form, or post
• Technical data such as IP address, browser type, and pages visited, collected via cookies

We do not collect special category data (such as health or biometric information) unless it is directly relevant to a legal matter you have instructed us to handle.

3. How we collect personal data

We collect personal information when you:

• Complete and submit a contact form on our website
• Contact us by telephone or email
• Visit our office in person
• Browse our website (technical data via cookies)

4. Why we use your personal data and the legal basis

We use your personal information for the following purposes:

• To respond to your enquiry — legal basis: legitimate interest in responding to correspondence
• To provide legal services — legal basis: contract performance where you have engaged us
• To maintain records required by professional and regulatory obligations — legal basis: legal obligation
• To improve our website — legal basis: legitimate interest, using anonymised analytics data

We do not use your personal data for marketing without your explicit consent.

5. How long we keep your data

Enquiry correspondence is retained for up to 24 months. Where we have been engaged to provide legal services, matter files are retained for a minimum of seven years in accordance with professional obligations under Thai law. Technical/cookie data is retained for a maximum of 13 months.

6. Data sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share information with:

• Courts, government bodies, or regulatory authorities where required by law or by the nature of your legal matter
• Professional advisors (e.g. interpreters or specialist counsel) where instructed to do so in connection with your matter
• IT service providers who assist in operating this website, under appropriate data processing agreements

7. Data security

We store personal data on secure systems with access limited to team members who need it to carry out their work. Client files are kept in a restricted-access document management system. Where data is transmitted electronically, we use standard encryption protocols. In the event of a data breach that affects your rights, we will notify you promptly.

8. Cookies

Our website uses cookies to understand how it is used and to improve your experience. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

9. Your rights

Under applicable data protection law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to any retention obligations
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Request that we transfer your data to another provider (data portability)

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Children's privacy

Our services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18 other than where it is provided by a parent or guardian in the context of a legal matter. If you believe we have collected a child's data inappropriately, please contact us immediately.

11. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies before providing personal information.

12. Governing law and jurisdiction

This policy is governed by the laws of Thailand. For unresolved concerns about our data practices, you may contact the Personal Data Protection Committee (PDPC) of Thailand, which acts as the relevant supervisory authority under the Personal Data Protection Act B.E. 2562 (PDPA).

13. Changes to this policy

We may update this policy from time to time. When we do, the updated date at the top of this page will be revised. We recommend checking this page periodically for any changes.

14. Contact

For any questions about this policy or how we handle your data:

• Email: [email protected]
• Telephone: +66 53 218 760
• Post: Phukphan, 28 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand