Privacy Policy

1. Introduction

Krabi Legal ("we", "us", "our") is a law firm operating in Krabi Province, Thailand. We are committed to handling the personal information of our clients and website visitors with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA 2019).

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to information collected through our website at krabileg.pro and through our legal engagement process.

If you have questions about this Policy, please contact us at [email protected].

2. Data We Collect

2.1 Information You Provide

• Name and surname
• Email address
• Telephone number (if provided)
• The content of your enquiry or message
• Documents and information you share as part of a legal engagement (held under professional privilege)

2.2 Information Collected Automatically

• Website usage data via analytics cookies (page views, session duration, browser type)
• IP address and approximate geographic location
• Cookie preferences stored in your browser's local storage

2.3 Legal Basis for Processing

We process personal data on the following bases: (a) your consent, where required; (b) the performance of a legal services contract; (c) our legitimate interests in operating and improving our services; and (d) compliance with applicable Thai law.

2.4 Retention Periods

Enquiry and contact data is retained for up to 2 years from the date of last contact. Client engagement records are retained for 10 years following the conclusion of the matter, in line with Thai legal professional obligations.

3. How We Use Your Data

• To respond to your enquiry and provide legal services you have requested
• To communicate updates related to your matter
• To prepare and file legal documents on your behalf (where instructed)
• To improve the functionality and content of our website
• To comply with Thai Bar Association and legal professional obligations

We do not use your personal data for unsolicited marketing. We will not send you commercial communications unless you have specifically requested them.

4. Data Sharing

We do not sell or trade your personal data. We may share data in the following limited circumstances:

• With Thai courts, government registries, or official bodies as required by your legal matter
• With certified translators or external specialists engaged in support of your case, under confidentiality obligations
• With website analytics providers (e.g., Google Analytics), under data processing agreements
• Where required by Thai law or a court order

All data shared with third parties is limited to what is necessary for the purpose stated, and we take reasonable steps to ensure it is handled appropriately.

5. Data Protection Measures

• Client files are stored on secured, access-controlled systems with restricted staff access
• Email communications involving sensitive case information are conducted over encrypted channels where possible
• Physical documents are held in locked storage within our office
• In the event of a data breach that poses a risk to your rights, we will notify you and the relevant Thai authority within the timescales required by the PDPA
• We review our data security practices annually

6. Cookies

Our website uses cookies for essential functionality (session management), analytics (understanding how visitors use the site), and user preference storage. We do not use marketing or advertising cookies without your consent.

Full details of the cookies we use and how to manage them are set out in our Cookie Policy.

7. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate or incomplete data
• Right to erasure — in certain circumstances, you may request that we delete your data
• Right to restrict processing — you may ask us to limit how we use your data
• Right to data portability — you may request your data in a commonly used, machine-readable format
• Right to object — you may object to processing based on legitimate interests
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Note that some rights are subject to legal professional privilege and statutory retention obligations.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

8. Third-Party Links

Our website may contain links to external websites (for example, the Thai Bar Association or court portals). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies independently.

9. Children's Privacy

Our legal services are provided to adults (persons aged 18 and over). We do not knowingly collect personal data from minors. If you believe we hold data relating to a minor, please contact us so we can take appropriate steps.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website following a change indicates your acceptance of the updated terms.

11. Contact

Data Controller: Krabi Legal

Address: 32 Maharaj Road, Pak Nam, Mueang Krabi, Krabi 81000, Thailand

Privacy enquiries: [email protected]