Privacy Policy

1. Introduction

Sappaya Counsel ("we", "us", "our") is a legal services practice based at 47 Soi Ari, Phaya Thai, Bangkok 10400, Thailand. We take the protection of personal information seriously — particularly given that the matters we handle are often sensitive and personal in nature.

This Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in connection with it. It applies to information collected through this website, through direct contact with our practice, and in the course of providing legal services.

If you have questions about this Policy or about how we handle your information, please contact us at [email protected].

2. Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number, and postal address — provided when you complete a contact form, send an email, or call the practice.
• Matter-related information: details about the estate or inheritance situation you share with us, which may include information about deceased individuals, family circumstances, and asset details.
• Technical information: IP address, browser type, and pages visited — collected automatically through standard server logs and analytics tools.
• Communication records: copies of correspondence by email or post.

Legal basis for processing: We process your information on the basis of consent (when you submit a contact form), contractual necessity (to provide services you have engaged us for), and legitimate interest (to respond to enquiries and improve our website).

Retention: Contact enquiries are retained for up to 12 months. Client matter files are retained for at least 7 years following closure of the matter, in accordance with professional obligations under Thai law. Website analytics data is retained for up to 26 months.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiry and arrange a consultation
• To provide the legal services you have engaged us for
• To communicate with you throughout the matter
• To comply with our professional and legal obligations
• To understand how visitors use this website and improve it

We do not sell personal information. We do not send marketing communications without your consent. We do not use personal information for automated decision-making.

Third parties: We may share information with courts, government departments, financial institutions, or other lawyers where required to carry out your matter. We may use a small number of technology service providers (such as cloud storage and email) who process data on our behalf under appropriate agreements.

4. How We Protect Your Information

• Client files and correspondence are stored on password-protected, encrypted systems with restricted access.
• Physical documents are kept in locked storage and disposed of securely when no longer needed.
• This website uses HTTPS encryption for all data transmitted through contact forms.
• Access to client information within our team is limited to those working on your matter.
• In the event of a data breach affecting your personal information, we will notify you promptly and take appropriate steps to contain the incident.

5. Cookies

This website uses cookies to function and to understand how it is used. Essential cookies are required for the site to operate. Analytics and preference cookies are optional and can be declined via the cookie consent banner.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under the Thai Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, equivalent laws in other jurisdictions, you have the following rights in connection with your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to have inaccurate data corrected.
• Right to erasure: to request deletion of data where we no longer have a lawful basis to hold it.
• Right to data portability: to receive your data in a commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time.
• Right to object: to processing based on legitimate interest.
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before acting on your request.

7. Links to Other Sites

This website may contain links to external websites — for example, to relevant government departments or professional bodies. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy notices of any external sites you visit.

8. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be noted on this page with a revised "last updated" date. Where changes significantly affect how we handle your data, we will take reasonable steps to notify you directly if we hold your contact details.