Privacy Policy

1. Introduction

Krung Pact ("we", "us", "our") is committed to protecting the personal data of our clients, website visitors, and anyone who interacts with our services. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to your data.

This policy applies to all personal data processed through our website, contact forms, email communications, and in-person consultations conducted at our offices at 68 Ratchadamnoen Klang Road, Phra Nakhon, Bangkok 10200, Thailand.

For questions about this policy, please contact us at [email protected].

2. Information We Collect

We collect personal data that you provide directly to us when you submit a contact form on our website, communicate with us by phone, email, or in person, engage our legal services, or visit our website (through cookies and analytics).

The categories of personal data we may collect include your name, email address, phone number, postal address, details related to your legal matter (such as property information, corporate documents, or identification documents), and technical data such as IP address, browser type, and pages visited on our website.

We collect this data on the following legal bases under Thailand's Personal Data Protection Act (PDPA): your consent (for marketing communications and optional cookies), contractual necessity (to deliver the legal services you have engaged), legitimate interest (to improve our services and website), and legal obligation (where Thai law requires us to retain certain records).

3. How We Use Your Information

We use the personal data we collect for the following purposes: to respond to your inquiries and provide information about our services, to deliver the legal services you have engaged (including document preparation, advisory work, and government coordination), to communicate with you regarding your engagement, to send you relevant updates about our services (only with your consent), to improve our website and user experience through analytics, and to comply with legal and regulatory obligations under Thai law.

We do not sell your personal data to third parties. We may share your data with government offices (such as the Land Department or Ministry of Commerce) when required as part of the legal services you have engaged, with third-party service providers who assist with website hosting and analytics (under contractual data protection obligations), and with professional colleagues when specialist referrals are made with your prior knowledge.

4. Data Protection Measures

We take the security of your personal data seriously. Our protective measures include encrypted digital storage for all client files, access controls limiting file access to authorized personnel, secure physical storage for original documents, regular review of our security practices, and breach notification procedures in accordance with the PDPA.

While we implement reasonable security measures, no method of electronic storage or transmission is completely secure. We encourage you to contact us immediately if you suspect any unauthorized access to your information.

5. Cookies

Our website uses cookies to provide essential functionality and to understand how visitors use our site. Essential cookies are required for the website to function and cannot be disabled. Analytics cookies help us understand how visitors interact with the website. Marketing cookies may be used to deliver relevant information to you. Preference cookies remember your settings and choices.

You can manage your cookie preferences through our Cookie Policy page or through your browser settings.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Contact form submissions are retained for up to twelve months if no engagement follows. Client engagement files are retained for a minimum of five years following the completion of the engagement, as required by Thai professional standards. Website analytics data is retained for up to twenty-four months. Marketing consent records are retained until you withdraw your consent.

After the applicable retention period, data is securely deleted or anonymized.

7. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data: the right to access the personal data we hold about you, the right to request correction of inaccurate or incomplete data, the right to request deletion of your data (subject to legal retention requirements), the right to restrict or object to certain processing activities, the right to data portability in certain circumstances, the right to withdraw consent for processing based on consent, and the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external website you visit.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without appropriate parental consent, we will take steps to delete that information.

10. International Data Transfers

In some cases, personal data may be transferred to recipients outside Thailand — for example, when preparing documents for international use or coordinating with overseas legal representatives at your request. Any such transfer is carried out in compliance with the PDPA's provisions on international data transfers, including ensuring that the receiving jurisdiction provides adequate data protection or that appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our data protection team:

Supervisory Authority: Personal Data Protection Committee (PDPC), Thailand