Legal Document
Privacy Policy
Last Updated: 10 June 2025
Suep San ("we", "us", "our") is a legal practice based in Hat Yai, Songkhla, Thailand. We are committed to protecting the personal data of every person who contacts us or engages our services. This policy explains what data we collect, why we collect it, how it is used, and the rights available to you under Thai law — in particular the Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
If you have any questions about this policy, please contact us at [email protected].
1. Data Controller
The data controller responsible for your personal data is:
Suep San
200 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
Phone: +66 74 236 5081
Email: [email protected]
2. Personal Data We Collect
We collect personal data only where necessary for the purposes described in this policy. The categories of data we may collect include:
- Contact information: name, telephone number, email address — collected when you submit an enquiry form or contact us directly.
- Case-related information: details about the estate or succession matter you bring to us — shared by you during consultations or in correspondence.
- Identity documents: copies of identification documents where required to fulfil our legal obligations or to verify identity for formal proceedings.
- Technical data: basic website usage data collected via cookies (see Section 5).
Legal Basis for Processing
We process your personal data on the following grounds under the PDPA:
- Contractual necessity: to provide the legal services you have engaged us for.
- Legitimate interests: to respond to enquiries and manage our practice.
- Legal obligation: to comply with Thai law where applicable.
- Consent: for optional communications such as service updates, where you have opted in.
Retention Periods
Client matter files are retained for a minimum of seven years following case completion, in accordance with professional obligations and statutory limitation periods under Thai law. Enquiry records from non-clients are retained for up to twelve months.
3. How We Use Your Data
We use personal data for the following purposes:
- To respond to your enquiry and arrange an initial consultation.
- To carry out the legal services you have engaged us to perform.
- To communicate with you about your matter and any updates.
- To comply with court orders, regulatory obligations, or other legal requirements.
- To improve the usability of our website (via anonymous analytics data).
Third-Party Sharing
We do not sell or rent personal data to third parties. We may share data with:
- Courts, land registries, and government offices — where required to advance your legal matter.
- Professional advisors (such as translators or notaries) where engaged on your behalf.
- Website service providers — for basic hosting and analytics, under data processing agreements.
4. How We Protect Your Data
- Physical and electronic client files are stored securely with access restricted to authorised personnel.
- Our website uses HTTPS encryption for all data transmitted via online forms.
- Staff are trained on confidentiality obligations and PDPA requirements.
- In the event of a data breach that poses a significant risk to individuals, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours and affected individuals without undue delay.
5. Cookies
Our website uses cookies to support basic functionality and, with your consent, to gather anonymous usage statistics. We do not use cookies for advertising. Essential cookies are required for the site to work and cannot be disabled. For full details and to manage your preferences, please see our Cookie Policy.
6. Your Rights Under Thai PDPA
You have the following rights in relation to your personal data:
Right to Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete data.
Right to Erasure
You may ask us to delete your data in certain circumstances, subject to our legal retention obligations.
Right to Object
You may object to processing based on legitimate interests where your interests override ours.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.
Right to Lodge a Complaint
You may contact the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.
7. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their policies separately before submitting personal data.
8. Children's Privacy
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us promptly so we can take appropriate action.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of our website or services after a policy update constitutes acceptance of the revised terms.
10. Contact for Privacy Matters
For any questions, requests, or concerns regarding this policy or your personal data, please contact us:
Data Enquiries
+66 74 236 5081
200 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand