Privacy Policy

1. Introduction

Pranom Legal ("we", "us", "our"), located at 65 Nimmanhaemin Road, Suthep, Mueang, Chiang Mai 50200, Thailand, is committed to handling personal information with care and discretion. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in respect of that data.

This Policy applies to information collected through our website and through direct contact with our practice. If you have questions, you may contact us at [email protected].

2. Information We Collect

We collect personal information in the following ways:

• Information you provide through our contact form (name, email address, telephone number, and any details you include in your message)
• Information provided during consultations, appointments, and correspondence
• Technical data collected automatically when you visit our website (IP address, browser type, pages visited), handled via cookies as described in our Cookie Policy

We do not collect sensitive personal data (such as financial account information) through our website. Sensitive information relevant to your legal matter is handled under separate professional confidentiality obligations.

3. Legal Basis for Processing

We process personal data on the following bases:

• Consent — when you submit our contact form, you consent to us using your information to respond to your enquiry
• Contract performance — to deliver the legal services you have engaged us to provide
• Legitimate interests — to manage our practice, maintain records, and improve our website
• Legal obligation — to comply with obligations under Thai law and applicable professional rules

4. How We Use Your Information

Personal information collected through our website is used to respond to your enquiry and, where an engagement is established, to provide the legal services requested. We do not use enquiry data for marketing purposes without your express agreement. We do not sell personal data to third parties.

Information shared in the course of a legal engagement is handled under professional confidentiality obligations and is used solely for the purposes of that engagement, unless disclosure is required by law or by court order.

5. Retention Periods

Enquiry data received through our contact form is retained for twelve months from the date of receipt, or longer if an engagement follows. Client matter files are retained for seven years from the conclusion of the engagement, in accordance with professional obligations under Thai law. Website analytics data is retained for no more than twenty-six months.

6. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure. These include secure server infrastructure, access controls, and restricted internal access to client information. In the event of a data breach that is likely to result in a risk to individuals, we will notify affected parties and the relevant authority as required by applicable law.

7. Cookies

Our website uses cookies to support its basic functionality and to help us understand how visitors use the site. You may manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data:

• The right to access the personal data we hold about you
• The right to have inaccurate information corrected
• The right to request erasure of data that is no longer necessary for the purpose for which it was collected
• The right to object to processing carried out on the basis of legitimate interests
• The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period and no later than thirty days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 through our website.

11. Governing Law

This Policy is governed by the laws of Thailand. Data protection matters are subject to the Personal Data Protection Act B.E. 2562 (PDPA) and related regulations. If you believe your rights have not been respected, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website following an update constitutes acceptance of the revised Policy.

13. Contact

For any privacy-related enquiries, please contact: