Legal Document
Privacy Policy
Last Updated: 15 May 2025 | Sapsin Phitak · Bangkok, Thailand
1. Introduction
Sapsin Phitak ("we", "our", "the practice") is committed to handling personal information with the care it deserves. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights available to individuals whose data we hold.
The practice is located at 129 Thanon Witthayu, Lumphini, Pathum Wan, Bangkok 10330, Thailand. We act as data controller for personal information collected through our website and in the course of our professional services. Questions regarding this policy may be directed to [email protected].
2. Personal Data We Collect
We collect the following categories of personal information:
- Name and contact details (email address, telephone number) provided through our website enquiry form
- Correspondence submitted via the contact form, including any description of the individual's situation
- Technical data such as IP address, browser type, and pages visited, collected automatically via cookies and analytics tools
- In the course of providing legal services, additional personal and financial information relevant to the matter, provided directly by the client
We do not collect sensitive personal data (such as health information, political opinions, or biometric data) through our website. Any sensitive information relevant to a legal matter is collected only in the context of that engagement, with the client's knowledge.
3. Legal Basis for Processing
We process personal data on the following legal grounds under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand:
- Consent: Where you have provided consent for us to contact you in response to a website enquiry
- Contractual necessity: Where processing is required to perform legal services you have engaged us to provide
- Legitimate interests: For the operation and improvement of our website, provided this does not override your rights
- Legal obligation: Where we are required to retain records under Thai professional conduct or tax regulations
4. How We Use Personal Data
Personal information collected through our website is used to:
- Respond to enquiries submitted via the contact form
- Arrange and conduct initial consultations
- Assess whether we are able to assist with a prospective matter
Personal information collected in the course of providing legal services is used solely for the purposes of that engagement. We do not use client data for marketing purposes without explicit consent, and we do not sell personal data to third parties under any circumstances.
5. Data Sharing
We do not routinely share personal data with third parties. In the following limited circumstances, sharing may be necessary:
- With government bodies such as the Land Department or courts, where this is required to carry out instructed legal work
- With professional counterparts in other jurisdictions, where a client has engaged us to assist with a cross-border matter and has been informed of this
- With technology service providers who host our website or provide analytics services, under data processing agreements
- Where required by law, court order, or regulatory obligation
6. Data Retention
Website enquiry data is retained for a period of 12 months from the date of submission, after which it is securely deleted unless a legal engagement has commenced. Client matter files are retained for a period of 7 years from the conclusion of the engagement, in accordance with professional obligations under Thai Bar Association requirements. Where retention beyond this period is required by law, we retain only what is legally necessary.
7. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or disclosure. These include:
- Encrypted transmission of data via our website (HTTPS)
- Access controls limiting which personnel can view client information
- Secure storage of physical documents relating to client matters
- Regular review of security practices
In the event of a personal data breach that poses a risk to individuals, we will notify the affected individuals and the relevant supervisory authority in accordance with the requirements of the PDPA.
8. Cookies
Our website uses cookies to support its operation and to understand how visitors use it. We use essential cookies (required for basic functionality), analytics cookies (to understand site usage), and preference cookies (to remember visitor settings). For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
9. Your Rights
Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:
- The right to be informed about how your data is used (this policy provides that information)
- The right to access a copy of the personal data we hold about you
- The right to have inaccurate data corrected
- The right to request erasure of your data, subject to our legal retention obligations
- The right to object to processing based on legitimate interests
- The right to withdraw consent at any time, where processing is based on consent
- The right to lodge a complaint with the Personal Data Protection Committee of Thailand
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal information to them.
11. Children
Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18 through our website. If you believe a minor has submitted personal data to us, please contact us and we will arrange for its deletion.
12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last updated. We recommend reviewing it periodically.
13. Contact
For any questions or requests related to this policy or your personal data:
- Email: [email protected]
- Address: 129 Thanon Witthayu, Lumphini, Pathum Wan, Bangkok 10330, Thailand