Privacy Policy

1. Introduction

Wai Thong ("we", "us", "our") is a legal practice based at 210 Phloen Chit Road, Lumphini, Bangkok 10330, Thailand. We provide pension protection legal services and are committed to handling all personal information with care and in accordance with applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what personal data we collect, how we use it, and what rights you have. If you have any questions, you can reach us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

• Contact forms: name, email address, phone number, and any message you choose to submit.
• Consultation meetings: pension documents, identification documents, correspondence from pension authorities, and other material you share with us.
• Website usage: analytics data collected via cookies (see Section 5 and our Cookie Policy).

Legal basis for processing:

• Contract performance — to provide the legal services you have engaged us for
• Legitimate interest — to respond to enquiries and administer client matters
• Consent — for analytics and non-essential cookies where applicable
• Legal obligation — where required by Thai law

Retention: Contact enquiry data is held for 12 months. Client matter data is retained for 7 years following the conclusion of the matter, in line with standard legal practice requirements in Thailand. After this period, data is securely deleted.

3. How We Use Your Personal Data

• Responding to your initial enquiry or arranging a consultation
• Delivering the legal service you have engaged us for
• Preparing and submitting correspondence, documents, or formal submissions on your behalf
• Keeping you informed of progress in your matter
• Meeting any legal or regulatory obligations applicable to legal practitioners in Thailand
• Improving our website and services through anonymised analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with pension authorities or government bodies where this is necessary for your matter and with your knowledge.

4. How We Protect Your Data

• Client files are stored on password-protected systems with access restricted to authorised staff only
• Our website uses HTTPS encryption for all data transmitted via contact forms
• Physical client documents are stored securely and destroyed by shredding when no longer required
• Staff with access to client data are trained in confidentiality obligations
• In the event of a data breach, affected individuals will be notified promptly and in accordance with applicable Thai PDPA requirements

5. Cookies

Our website uses cookies to support basic functionality and, where you consent, to collect anonymised analytics data. Full details of the cookies we use, and how to manage your preferences, are set out in our Cookie Policy.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may ask us to correct inaccurate data.
• Erasure: You may ask us to delete your data in certain circumstances.
• Portability: You may ask for your data in a portable format where technically feasible.
• Objection: You may object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand.

7. Links to Other Websites

Our website may contain links to external websites, including government and pension authority sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to check this page periodically if you are an existing client or regular visitor.

10. Contact for Data Enquiries

For any questions or requests relating to your personal data: