Privacy Policy

1. Introduction

Phithak operates from 64 Asok Montri Road, Watthana, Bangkok 10110, Thailand. We act as the data controller for any personal information processed in connection with our services. If you have questions about this policy or how your data is handled, you are welcome to reach us at [email protected] or by calling +66 2 661 8274.

This policy covers visitors to our website and individuals who contact us or engage our services. Reading it carefully helps you understand the choices available to you.

2. Information We Collect

We collect only the information we genuinely need to respond to an enquiry or provide a service. This may include:

• Your name and contact details (telephone number, email address)
• Details about your pension matter, as shared with us during a consultation or correspondence
• Information submitted through our website contact form
• Technical data from your browser visit, such as IP address, browser type, and pages viewed — collected via cookies and analytics tools

Legal basis for processing. We process personal data on the basis of your consent (where you have provided it), the performance of a contract or pre-contractual steps at your request, and our legitimate interest in running a professional legal practice. We are bound by professional legal obligations that may also require us to retain certain records.

Retention. Correspondence and consultation records are held for a minimum of five years following the conclusion of a matter, in keeping with professional obligations under Thai law. Website enquiry data is held for no longer than two years unless an ongoing relationship exists.

3. How We Use Your Information

Your information is used to:

• Respond to your enquiry or request for legal services
• Prepare and deliver correspondence, submissions, or representation on your behalf
• Maintain records of instructions and communications
• Send relevant updates about your matter by email or telephone
• Improve our website using aggregated, anonymised analytics
• Comply with our legal and professional obligations

Marketing. We do not send marketing communications without your prior consent. If you have consented and later wish to withdraw, please email [email protected].

Third-party sharing. We do not sell or trade your personal information. We may share limited information with professional advisors (such as barristers or specialist consultants) engaged on your matter, with your knowledge. We may also share data where required to do so by Thai law or a competent authority.

4. Data Protection Measures

We take reasonable steps to keep your information secure. These include:

• Encrypted transmission (HTTPS/TLS) for data submitted via our website
• Access controls limiting who within our practice can view client records
• Secure storage of physical files within our office
• Regular review of our data handling practices

In the unlikely event of a data breach that may affect your rights, we will notify you promptly and take steps to address it. You may also report concerns to us directly at [email protected].

5. Cookies

Our website uses cookies — small text files placed on your device — to help the site function and to understand how it is used. We use:

• Essential cookies — required for the site to operate correctly
• Analytics cookies — to understand visitor behaviour in aggregate
• Preference cookies — to remember choices you have made
• Marketing cookies — used only if you have given consent

You can manage your cookie preferences at any time on our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data, subject to legal retention obligations
• Restrict processing in certain circumstances
• Withdraw consent at any time where processing is based on consent
• Object to processing based on legitimate interest
• Data portability where technically feasible
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand

To exercise any of these rights, please write to [email protected]. We will respond within 30 days and will not charge a fee for a reasonable request.

7. Third-Party Links

Our website may occasionally contain links to external resources. Once you leave our site, we have no control over the content or privacy practices of those pages. We encourage you to read the privacy policy of any site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with information, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practice or applicable law. When we do, the revised version will be published on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website after any change constitutes acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy or about how your personal data is handled, you are welcome to reach us through any of the following: