Privacy Policy

1. Introduction

Thayat ("we", "us", "our") is a legal practice based in Chiang Mai, Thailand, registered with the Lawyers Council of Thailand. We are committed to handling your personal information with care and in accordance with applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. If you have questions, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact forms: name, email address, phone number, and any information you provide in a message.
• In-person or telephone meetings: information you share when discussing your matter with us, which may include personal and family details relevant to the inheritance matter.
• Website analytics: general usage data such as pages visited and browser type, collected through cookies (see Section 5).

Legal basis: We process personal data with your consent (where required), to fulfil a contract or pre-contractual request, and in pursuit of legitimate interests in operating our practice. Sensitive data related to legal matters is processed under legal professional privilege and the requirements of the PDPA.

Retention: Contact enquiry data is retained for up to 12 months if no engagement follows. Client matter data is retained for 7 years in accordance with professional obligations, then securely deleted.

3. How We Use Your Data

• To respond to your enquiry and arrange a first meeting
• To provide and administer legal services you have engaged us for
• To communicate updates related to your matter
• To comply with our professional and legal obligations
• To improve the performance and content of our website (via aggregated analytics)

We do not use your data for unsolicited marketing. We do not sell your personal data to third parties.

4. Data Sharing

We share your data only where necessary to carry out your matter or to meet legal obligations. This may include:

• Thai courts and administrative offices relevant to your matter
• Land offices and other government registries
• Third-party service providers who support our website and operations (such as web hosting), under data processing agreements

We do not share your data with other law firms, marketing companies, or data brokers.

5. Cookies

Our website uses cookies to understand how visitors use the site and to remember your preferences. We use essential cookies (required for the site to function), analytics cookies (to understand visitor behaviour), and preference cookies (to store your settings).

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Data Protection Measures

• Access to client files is restricted to the team members working on your matter
• Our website uses HTTPS encryption for all data transmitted through contact forms
• Physical files are held in secure storage at our office
• In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authority as required by law

7. Your Rights

Under the Thai PDPA, you have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you
• Rectification: to correct inaccurate or incomplete data
• Erasure: to request deletion of data where no longer necessary (subject to legal retention requirements)
• Portability: to receive your data in a structured, machine-readable format where technically feasible
• Objection: to object to processing based on legitimate interests
• Withdraw consent: at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee of Thailand.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will take steps to remove it promptly.

10. Policy Updates

We may update this policy from time to time. Where changes are material, we will place a notice on our website. The date at the top of this page shows when the policy was last revised. Continued use of our website after changes are published constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact us: