Privacy Policy

Introduction

Our Commitment to Your Privacy

Suvarna Law ("we", "us", "our") is a legal practice based at 196 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand. We provide pension legal services to individuals and are committed to handling your personal data with care and in accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. If you have questions, please contact us at [email protected].

Section 1

What Data We Collect

When you contact us or engage our services, we may collect the following categories of personal data:

• Identity data: your full name and, where relevant to your matter, identification numbers or employment reference numbers.
• Contact data: your email address, telephone number, and postal address.
• Matter data: pension records, employment history documents, Social Security correspondence, and other materials you provide or that we obtain in the course of providing legal services.
• Technical data: IP address, browser type, and cookie data collected when you visit our website.

Legal basis for processing: We process your data on the basis of your consent (where given), the performance of a legal services contract, and our legitimate interest in providing and improving our services. Where sensitive personal data is involved in a legal matter, we process it on the basis of providing legal services as permitted under applicable Thai law.

Retention: Contact enquiry data is retained for 12 months. Matter-related data is retained for 7 years from the conclusion of the relevant matter, in accordance with professional obligations and applicable limitation periods.

Section 2

How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and schedule consultations
• To provide the legal services you have engaged us for
• To communicate updates related to your matter
• To comply with professional, legal, and regulatory obligations
• To improve the website and our services (using anonymised analytics data)

Third-party sharing: We do not sell your personal data. We may share data with the Social Security Office, administrative bodies, or counterparties where required for the provision of legal services and with your consent or as required by law. We use Google Analytics for anonymous website traffic analysis.

We do not send marketing communications without your explicit consent. If you have provided consent and wish to withdraw it, contact us at [email protected].

Section 3

How We Protect Your Data

• Secure document storage with access restricted to staff working on your matter
• Encrypted transmission for electronic documents and communications
• Access controls and staff confidentiality obligations
• Breach notification procedures in accordance with PDPA requirements

In the event of a data breach affecting your personal data, we will notify you in accordance with our obligations under the PDPA and applicable regulations.

Section 4

Cookies

Our website uses essential cookies for basic functionality and optional cookies for analytics purposes. We request your consent before placing non-essential cookies. You can review and manage your cookie preferences at any time on our Cookie Policy page.

Section 5

Your Rights

Under the PDPA and applicable Thai law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to our legal retention obligations
• Right to data portability — to receive your data in a portable format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at [email protected]. If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

Section 6

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you review their policies before providing any personal data.

Section 7

Children's Privacy

Our services are intended for persons aged 18 or older. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to remove it.

Section 8

Policy Updates

We may update this policy from time to time. Where changes are material, we will notify clients directly or by posting a notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision.

Section 9

Contact for Data Matters