Privacy Policy

1. Introduction

Mongkol Law ("we", "us", "our") is a legal practice based at 309 Phaya Thai Road, Ratchathewi, Bangkok 10400, Thailand. We are the data controller for the personal information we hold about you.

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all information collected through our website, through initial enquiries, and through the course of providing legal services to our clients.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect and How

2.1 Information you provide directly

• Full name and contact details (email address, telephone number)
• Correspondence and documents you share with us in connection with your matter
• Pension-related personal information necessary to advise you and represent your interests
• Information submitted through our website contact form

2.2 Information collected automatically

• Website usage data via analytics cookies (pages visited, session duration)
• Technical data such as browser type and approximate location based on IP address

2.3 Legal basis for processing

We process your data on the following grounds under applicable Thai data protection law (Personal Data Protection Act B.E. 2562):

• Contract: To provide legal services you have requested
• Legitimate interests: To manage our business and improve our services
• Consent: For optional communications and analytics cookies (where obtained)
• Legal obligation: Where required by Thai law or professional regulations

2.4 Retention periods

Client files are retained for 7 years from the close of the matter, as required by professional rules. Website enquiry data is retained for 2 years unless a client relationship arises. Analytics data is retained for 13 months.

3. How We Use Your Data

• To respond to your enquiries and provide the legal services you request
• To correspond with pension funds, authorities, and third parties on your behalf
• To maintain records of advice given and steps taken
• To comply with professional and legal obligations
• To analyse how our website is used and improve the experience for visitors
• To send you information about our services where you have consented to receive it

We do not sell or share your personal data with third parties for marketing purposes. We share your data only where necessary to deliver legal services (e.g. pension fund correspondence), or where required by law.

4. Data Protection Measures

• Client files are stored on encrypted, access-controlled systems
• Physical documents are kept in secured filing with restricted access
• Staff access to client data is limited to those working on the relevant matter
• We review our security arrangements regularly
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required by Thai law

5. Cookies

Our website uses cookies to function and to help us understand how visitors use it. Essential cookies are required for the site to work. Analytics and preference cookies are optional and subject to your consent.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand), you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Ask us to restrict processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format where applicable
• Objection: Object to processing based on legitimate interests
• Withdrawal of consent: Withdraw any consent you have given at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that we have done so, we will delete it promptly.

9. Updates to This Policy

We may revise this policy from time to time. When we do, we will update the "last updated" date at the top of the page and, where the changes are material, notify active clients by email. Continued use of our website after any revision constitutes acceptance of the updated policy.