Legal
Privacy Policy
Last updated: 20 June 2025
1. Introduction
Anurak Law ("we", "us", "our") is a legal practice based in Bangkok, Thailand. We are committed to handling personal information responsibly and in line with applicable Thai data protection requirements, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what personal data we collect, how we use it, and what rights you have in relation to it.
If you have questions about this policy, you can contact us at [email protected].
2. Data We Collect
We may collect the following categories of personal information:
- Name, email address, and phone number (submitted via our contact form or by telephone)
- Pension-related documents you choose to share with us as part of our services
- Correspondence records including emails and notes from telephone discussions
- Website usage data collected via cookies (see Section 6)
We collect information directly from you and do not purchase or obtain personal data from third-party data brokers.
3. How We Use Your Information
Personal data collected is used to:
- Respond to your enquiries and determine which service applies to your situation
- Carry out the legal services you engage us for, including document preparation and submission
- Communicate case updates and relevant information to you
- Maintain records of our professional engagements as required by law
- Understand how visitors use our website, in order to improve it (analytics only, where consent is given)
We do not use your personal data for marketing purposes without your explicit consent.
4. Legal Basis for Processing
We process your personal data on the following grounds:
- Contract performance — where processing is necessary to provide the legal service you have engaged us for
- Legitimate interest — for responding to general enquiries and maintaining business records
- Consent — for optional cookies and any direct marketing communications
- Legal obligation — where we are required to retain records under Thai law or professional regulations
5. Data Sharing
We do not sell your personal data. We may share information with:
- Government offices (e.g. the Social Security Office or relevant pension authority) where this is necessary to carry out the service you have engaged us for
- Service providers who support our operations (e.g. email hosting), subject to appropriate data processing agreements
- Regulatory or legal bodies where we are required to do so by law
6. Cookies
Our website uses cookies to understand how it is used. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are only used where you have provided consent via the cookie notice on the homepage. For full details, see our Cookie Policy.
7. Data Retention
We retain personal data for as long as necessary to fulfil the purpose for which it was collected, and for any period required by Thai professional conduct rules or applicable law. Enquiries that do not progress to a service engagement are typically deleted within 12 months. Case files are retained for a minimum of five years after the matter is closed.
8. Data Security
We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure. These include access controls on internal systems, use of encrypted email where appropriate, and secure physical storage of paper documents. In the event of a data breach that is likely to affect your rights, we will notify you promptly.
9. Your Rights Under the PDPA
Under the Personal Data Protection Act B.E. 2562, you have the following rights:
- The right to access the personal data we hold about you
- The right to request correction of inaccurate data
- The right to request deletion of your data, subject to our legal retention obligations
- The right to withdraw consent (where processing is based on consent)
- The right to object to processing based on legitimate interest
- The right to data portability where technically feasible
- The right to lodge a complaint with the Personal Data Protection Committee
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information to us, please contact us and we will delete it.
11. Third-Party Links
Our website may contain links to external resources such as government pension portals. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
12. Changes to This Policy
We may update this policy from time to time. When we do, the revised version will be published on this page with an updated date. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
13. Contact
For any questions relating to this policy or your personal data:
Anurak Law
88 Charoen Krung Road, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]
Phone: +66 2 467 92 30