Privacy Policy

Last updated: 14 April 2025

krungthed ("the firm", "we", "us") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable international data protection standards. This policy explains what data we collect, how we use it, and the rights available to you.

1. Who We Are

krungthed is a corporate law firm registered and operating in Thailand, with offices at 142 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand. For questions relating to this policy or to your personal data, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms: name, email address, phone number, and the content of any message submitted.
• Engagement correspondence: names, contact details, corporate roles, and documents shared during the course of a legal engagement.
• Website analytics: anonymised usage data (page views, device type, approximate location) collected via cookies where consent is given.
• Business cards and introductions: contact details provided directly in a professional context.

We do not collect sensitive personal data (as defined under the PDPA) unless it is directly necessary for a specific legal engagement and you have provided explicit consent.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Performance of a contract: where processing is necessary to carry out a legal engagement you have entered into with us.
• Legitimate interests: for business development, enquiry management, and regulatory compliance monitoring, where these do not override your interests.
• Consent: for analytics cookies and optional communications. You may withdraw consent at any time.
• Legal obligation: where Thai law or professional regulation requires us to retain or disclose information.

4. How We Use Your Data

• To respond to enquiries and provide the services you have engaged us for.
• To prepare and deliver legal memoranda, documents, and advice.
• To coordinate with government departments (such as the DBD) on your behalf, where instructed.
• To maintain engagement records as required by professional standards and Thai law.
• To improve our website and communications, where you have consented to analytics.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Data Sharing

We may share personal data with:

• Government departments and regulatory bodies in Thailand (e.g. the Department of Business Development) where required for service delivery.
• Notaries, translators, or other professional service providers engaged on your behalf, under confidentiality obligations.
• Our own professional indemnity insurer, as required.
• Law enforcement or regulatory authorities, where legally required.

6. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Enquiry records: 12 months from date of last contact if no engagement follows.
• Engagement records: 7 years from the close of the engagement, in line with Thai legal professional standards.
• Analytics data: 13 months from collection, in anonymised form.

7. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include password-protected systems, encrypted document storage, and limited internal access controls. In the event of a data breach that may affect your rights, we will notify you and the relevant supervisory authority as required by law.

8. Cookies

Our website uses cookies. Essential cookies are required for basic site functionality. Optional analytics and preference cookies are used only with your consent, which you can manage through our Cookie Policy page at any time.

9. Your Rights Under the PDPA

Under the Thai Personal Data Protection Act, you have the right to:

• Access personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of data, subject to our legal retention obligations.
• Object to or restrict certain processing activities.
• Withdraw consent at any time (without affecting the lawfulness of prior processing).
• Lodge a complaint with Thailand's Personal Data Protection Committee.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our services are directed at adults and businesses. We do not knowingly collect personal data from individuals under the age of 18.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by direct notification. Continued use of our services after any change constitutes acceptance of the revised policy.

13. Contact

For any privacy-related enquiries: [email protected]
krungthed, 142 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand.