Legal Document

Privacy Policy

Saiyok Legal — Last Updated: 12 May 2025

Saiyok Legal ("we", "us", "our") is committed to handling the personal information of clients and website visitors with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what data we collect, why we collect it, how we use it, and the rights you hold in respect of it.

Questions about this policy may be directed to [email protected].

1. Personal Data We Collect

We collect personal data only where it is necessary to provide our services or respond to an enquiry. The categories of data we may hold include:

  • Full name and preferred contact name
  • Email address and telephone number
  • Postal address (where relevant to service delivery)
  • Pension and employment records provided by you for the purpose of a legal review
  • Correspondence records, including messages sent via our website enquiry form
  • Basic website usage data collected through cookies (see Section 5)

We do not collect sensitive categories of personal data beyond what is directly relevant to your pension matter. Financial account details, national identification numbers, and medical records are not collected unless you specifically provide them as part of your pension documentation.

Legal basis for processing: We process your data on the basis of your consent (where you have submitted an enquiry or engaged our services), the performance of a contract (where we are delivering a service to you), and our legitimate interest in maintaining proper records of our legal work.

Retention: Enquiry data is retained for 12 months. Client file data is retained for 7 years following the conclusion of an engagement, in line with standard legal practice and the Lawyers Council of Thailand's requirements.

2. How We Use Your Personal Data

Personal data we hold is used for the following purposes:

  • Responding to enquiries submitted through our website contact form
  • Delivering the legal services you have engaged us to provide
  • Maintaining case files and producing written reports as part of our service
  • Communicating with you regarding the progress of your matter
  • Complying with legal and professional obligations
  • Improving the functionality of our website (using anonymised usage data)

We do not use your personal data for direct marketing purposes. We do not sell, rent, or otherwise make your personal data available to third parties for their commercial use.

Where we engage third-party service providers (such as secure document transfer tools or email services), those providers are instructed to handle your data only as directed by us and under appropriate data processing agreements.

3. How We Protect Your Data

We take the security of personal data seriously. Measures in place include:

  • Access to client files is restricted to the members of our team working directly on your matter
  • Physical documents are stored in locked filing systems within our office
  • Digital files are held on password-protected systems with restricted access controls
  • Website data transmission is protected using standard TLS encryption
  • We review our data handling practices regularly to ensure they remain appropriate

In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will notify the relevant authority and, where required, you as the data subject within the timeframes specified under the PDPA.

4. Cookies

Our website uses cookies to support its basic functionality and to understand how visitors use the site. Essential cookies are required for the site to operate and cannot be disabled. Optional analytics and preference cookies are only placed with your consent.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

5. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you hold the following rights in relation to personal data we hold about you:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate or incomplete data.
  • Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and professional retention obligations.
  • Right to data portability: Where applicable, you may request that data you have provided be transferred in a structured format.
  • Right to object: You may object to processing where it is based on legitimate interest.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
  • Right to lodge a complaint: You may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

6. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

7. Persons Under 18

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have received data from a minor, please contact us and we will take appropriate steps to remove it.

8. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will update the date at the top of this page. Continued use of our website following an update constitutes acceptance of the revised policy.

9. Contact for Data Matters

Data Controller: Saiyok Legal

Address: 215 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand

Email: [email protected]

Telephone: +66 53 894 2176

Supervisory Authority: Personal Data Protection Committee (PDPC), Thailand