Privacy Policy

1. Introduction

Wongsakan ("we", "us", "our") is a family law practice operating from Bangkok, Thailand. We are committed to protecting the personal information of those who contact us or engage our services. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights available to you.

This policy applies to information collected through our website at wongsakan.biz, through our contact form, and during any correspondence with our team. By using our website or providing your details, you acknowledge that you have read and understood this policy.

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact information: name, email address, phone number, as submitted through our contact form or direct correspondence.
• Case information: details you share about your family or legal situation in order for us to assess how we may assist.
• Website usage data: IP address, browser type, pages visited, and session duration — collected via cookies and analytics tools if consent has been given.

Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process data on the following bases:

• Consent — for optional cookies and marketing communications
• Contract performance — to respond to your enquiry and deliver services engaged
• Legitimate interests — for security purposes and improving our service
• Legal obligation — to comply with applicable Thai law

Retention Periods

Contact enquiry data is retained for up to 12 months if no engagement follows. Client matter data is retained for 7 years following the close of a matter, in line with legal professional obligations. Website analytics data is retained for up to 26 months.

3. How We Use Your Data

• To respond to your enquiry and provide legal advice or services
• To communicate with you regarding your matter and any developments
• To improve the usability and content of our website (analytics, with consent)
• To comply with legal and regulatory requirements applicable to our practice
• To send service updates if you have provided consent to receive them

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling in any way that produces legal effects concerning you.

4. Data Sharing

We share personal data only in the following circumstances:

• With courts and regulatory bodies where required to progress a legal matter on your behalf
• With service providers such as secure cloud storage and email services, who are contractually bound to process data only on our instructions
• With analytics providers (e.g. Google Analytics) if you have consented to analytics cookies
• Where required by Thai law or a court order

5. Data Protection Measures

We take reasonable and appropriate technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure:

• Encrypted transmission (TLS) for all data sent to and from our website
• Access controls limiting data to staff directly involved in your matter
• Secure, password-protected document management systems
• Physical document security protocols in our Bangkok office

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under the PDPA.

6. Cookies

Our website uses essential cookies (required for basic site function) and optional analytics and preference cookies. A cookie consent notice is displayed on your first visit. You may adjust your cookie preferences at any time via our Cookie Policy page, which contains full details of the cookies used and how to manage them.

7. Your Rights Under Thai PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Access: to request a copy of the personal data we hold about you
• Rectification: to request correction of inaccurate or incomplete data
• Erasure: to request deletion of your data, subject to legal retention obligations
• Portability: to receive your data in a structured, machine-readable format where technically feasible
• Objection: to object to processing based on legitimate interests
• Withdrawal of consent: at any time, for processing based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies before submitting personal data.

9. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If a parent or guardian believes a minor has submitted data to us, please contact us promptly and we will arrange for its deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website following an update constitutes acceptance of the revised policy. Where changes are material, we will make a reasonable effort to notify you directly.