Privacy Policy

Introduction

Ayutthaya Counsel ("we", "us", "our") is committed to protecting the personal information of the individuals who visit our website or engage our services. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have in relation to it.

This policy is governed by Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have any questions about this policy, please contact us at [email protected].

Data We Collect

Information you provide

When you complete the enquiry form on our website, contact us by email, or engage our services, we may collect the following:

• Name
• Email address
• Telephone number
• Message or enquiry content
• Information about your assets, family circumstances, or estate planning needs (provided during consultations)

Information collected automatically

Our website may collect standard technical data when you visit, including your IP address, browser type, pages viewed, and referring URL. This data is used solely for the purpose of understanding how the website is used and improving its performance.

How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiry or provide a consultation
• To prepare and deliver legal documents as part of an engagement
• To communicate with you about your matter
• To comply with legal and regulatory obligations
• To improve the quality of our website and services

We do not use personal data for unsolicited marketing communications. If you have engaged our services and we wish to contact you about related matters in the future, we will do so only with your consent.

Legal Basis for Processing

Under the PDPA, we rely on the following lawful bases for processing personal data:

• Consent — where you have provided your data through our enquiry form or in the course of initial contact
• Contract — where processing is necessary to perform an engagement you have instructed us to carry out
• Legitimate interests — where we have a reasonable business need to process data, balanced against your interests and rights
• Legal obligation — where processing is required to comply with Thai law

Data Retention

We retain client files and related personal data for a period of seven years following the completion of an engagement, in accordance with standard legal practice requirements in Thailand. Enquiry data from individuals who do not proceed to an engagement is retained for a maximum of twelve months.

After the relevant retention period, personal data is securely deleted or anonymised.

Data Sharing

We do not sell or rent personal data to third parties. We may share personal data in the following limited circumstances:

• With overseas counsel where your engagement requires cross-jurisdiction coordination, and only with your explicit consent
• With government authorities or courts where required by law (such as the Land Department, Revenue Department, or Thai courts)
• With our technology service providers (such as secure document storage) who are bound by contractual confidentiality obligations

Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. Client files are stored in password-protected systems with access limited to staff directly involved in the relevant matter.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Office of the Personal Data Protection Committee (PDPC) within the timeframes required by the PDPA.

Cookies

Our website uses cookies to understand how visitors use the site and to record your cookie consent preference. For full details of the cookies we use, please see our Cookie Policy.

Your Rights Under the PDPA

As a data subject under the PDPA, you have the following rights:

• Right of access — to obtain confirmation of whether we hold your personal data and to receive a copy of it
• Right to rectification — to have inaccurate or incomplete data corrected
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and we encourage you to review their privacy policies independently.

Children

Our services are directed to adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data without parental consent, please contact us promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The most recent version will always be available on this page, with the date of last revision shown at the top. Continued use of our website following an update constitutes acceptance of the revised policy.

Contact

For privacy-related questions or to exercise your data rights, please contact:

Ayutthaya Counsel
92 Si Sanphet Road, Pratu Chai
Phra Nakhon Si Ayutthaya, Ayutthaya 13000, Thailand
Email: [email protected]
Telephone: +66 35 247 6189