Privacy Policy

1. Who We Are

Suphan Counsel ("we", "us", "our") is a legal services practice specialising in pension-related matters, based at 28 Wireless Road, Pathum Wan, Bangkok 10330, Thailand. We can be reached by telephone at +66 2 591 3846 or by email at [email protected].

We are the data controller for personal information that you provide to us or that we collect in connection with this website and our services. We take our responsibilities under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) seriously, and this policy explains in plain terms how we handle your data.

2. Data We Collect

We collect personal data only to the extent necessary to provide our services and to respond to your enquiries. The categories of data we may hold include:

• Contact information: your name, telephone number, email address, and postal address if provided.
• Enquiry content: information you share with us when describing your pension matter, whether by our contact form, email, or telephone.
• Matter-related documents: pension decisions, correspondence, and other documents you share with us so that we can advise you.
• Technical data: your IP address, browser type, device type, pages visited, and approximate location, collected automatically when you visit this website.
• Communication records: records of emails and correspondence between us, kept for our file.

We do not collect sensitive personal data (such as health information or national identification numbers) unless you choose to share it and it is directly relevant to your pension matter.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to your enquiries and providing initial guidance on your pension matter.
• Providing legal services that you have engaged us to carry out.
• Maintaining our client files and records as required by professional obligations.
• Sending you relevant updates about your matter or about significant legal developments that may affect it — though you may ask us to stop at any time.
• Improving this website and understanding how visitors use it, using anonymised or aggregated data where possible.
• Complying with our legal and regulatory obligations, including record-keeping requirements imposed by the Lawyers Council of Thailand.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under the PDPA, we process your personal data on the following legal bases:

• Performance of a contract: where you have engaged our services, processing is necessary to fulfil our obligations to you.
• Consent: for optional communications such as newsletters or service updates. You may withdraw consent at any time by contacting us.
• Legitimate interests: for maintaining our records, responding to pre-contractual enquiries, and operating this website — provided those interests do not override your rights.
• Legal obligation: where we are required to retain or disclose information to comply with Thai law or professional regulation.

5. Sharing Your Data

We do not sell your personal data. We share it only in the following circumstances:

• Service providers: We use a small number of trusted third-party services to operate our website and communications (such as hosting and email delivery). These parties are contractually bound to process data only on our instructions and in accordance with the PDPA.
• Professional referrals: With your knowledge, we may refer your matter to a specialist or barrister where that is in your interest.
• Legal or regulatory requirements: We may disclose data if required to do so by Thai law, court order, or professional regulatory body.

We do not transfer your data to countries outside Thailand without ensuring adequate protections are in place, as required under the PDPA.

6. How Long We Keep Your Data

We retain personal data for as long as is necessary for the purpose for which it was collected, or as required by law or professional obligation. In general:

• Enquiry records from people who did not proceed with our services are kept for up to 12 months, then securely deleted.
• Client files for completed matters are retained for a minimum of 7 years from the close of the matter, in line with standard Thai legal practice obligations.
• Website usage data is held in anonymised or aggregated form for up to 26 months.

7. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to ask us to delete your data where it is no longer necessary, subject to our legal obligations to retain certain records.
• Right to restriction: to ask us to pause processing of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly-used format where technically feasible.
• Right to object: to object to processing based on legitimate interests, including for direct communications.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

8. Cookies and Tracking

This website uses cookies and similar technologies to function correctly and to help us understand how visitors use it. For full details of the types of cookies we use, the purposes they serve, and how you can manage your preferences, please read our Cookie Policy.

When you first visit this website, a banner invites you to accept or decline non-essential cookies. You may change your preference at any time by revisiting the cookie notice or clearing your browser's local storage for this site.

9. Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS. Communications containing sensitive matter information are handled by encrypted email where available. However, no method of transmission over the internet is entirely without risk, and we cannot warrant absolute security.

10. Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under the age of 20 (the age of majority in Thailand) without the consent of a parent or legal guardian. If you believe a minor has provided us with personal data without appropriate consent, please contact us and we will take appropriate steps.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "last updated" date at the top of this page. Continued use of this website after any update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically.