Privacy Policy

1. Introduction

Thanin Legal ("the firm", "we", "us") is committed to handling personal information with care and discretion. Given the nature of our work — advising and representing clients in pension defence matters — we regularly receive personal and sensitive information. This policy explains what we collect, how we use it, and the rights available to individuals whose information we hold.

This policy applies to information collected through our website at thaninle.sbs, through enquiry forms, by telephone, and in the course of client engagements. It should be read alongside our Cookie Policy and Terms & Conditions.

Questions about this policy may be directed to [email protected].

2. Information We Collect

2.1 Information You Provide

• Full name and contact details (email address, telephone number)
• Business address or residential address where relevant to an engagement
• Details of employment history, pension scheme membership, and dispute background
• Documentation provided for case review (contracts, notices, scheme rules, correspondence)
• Communications exchanged with the firm by email, telephone, or letter

2.2 Information Collected Automatically

• Browser type and version, operating system
• Pages visited on our website and time of visit
• Referring website address
• IP address (stored only in aggregated form for analytics)

2.3 Legal Basis for Processing (Thailand PDPA)

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), we process personal data on the following bases: (a) consent, provided when submitting enquiry forms; (b) contractual necessity, where processing is required to fulfil an engagement; (c) legitimate interest, for communications directly related to a matter under review; and (d) legal obligation, where required by Thai law or court order.

3. How We Use Your Information

• Responding to initial enquiries and assessing whether we can assist
• Conducting case reviews, preparing position statements, and representing clients
• Maintaining engagement records and communication logs
• Complying with professional obligations and court requirements
• Improving the functionality and content of our website (using aggregated, anonymised data)

We do not sell, rent, or trade personal data. We do not use client information for marketing purposes without separate consent.

3.1 Third-Party Disclosure

Personal data may be shared with: courts and administrative bodies in the course of proceedings; appointed co-counsel or expert witnesses where required; professional indemnity insurers in connection with firm-wide obligations; and service providers involved in secure document storage or IT infrastructure. All third-party recipients are required to handle data in accordance with applicable Thai law.

4. Data Security and Retention

Client files are stored on encrypted systems with access restricted to the assigned case team. Physical documents are held in locked storage. Digital communications are transmitted over secure channels.

Engagement files are retained for seven years following the conclusion of a matter, in accordance with professional standards applicable to legal practitioners in Thailand. Website enquiry data that does not proceed to an engagement is deleted within 12 months of receipt. In the event of a data breach affecting personal data, affected individuals will be notified within 72 hours where required by the PDPA.

5. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Cookies do not identify individuals. You may manage cookie preferences through the consent control on the website or by adjusting your browser settings.

For a full explanation of the cookies we use and how to manage them, please see our Cookie Policy.

6. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, individuals have the following rights in relation to their personal data:

• Right of access: to obtain a copy of the personal data we hold about you
• Right to rectification: to have inaccurate data corrected
• Right to erasure: to request deletion of data, subject to legal retention obligations
• Right to restrict processing: to limit how your data is used in certain circumstances
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, write to [email protected]. We will respond within 30 days. Complaints may also be directed to the Office of the Personal Data Protection Committee (PDPC) in Thailand.

7. Third-Party Links

Our website may contain links to external resources, including court portals, government agencies, or professional bodies. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site before submitting personal information to it.

8. Age Restriction

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If we become aware that personal data of a minor has been submitted through our website, we will delete it promptly.

9. Changes to This Policy

This policy may be updated from time to time to reflect changes in applicable law or our practices. The updated version will be published on this page with a revised effective date. Continued use of our website or services following an update constitutes acceptance of the revised terms.

10. Contact for Data Enquiries

Data enquiries, access requests, and complaints should be addressed to: