Privacy Policy

1. Introduction

Saraburi Lex ("we", "us", "our"), a legal practice based at 263 Phahonyothin Road, Pak Phriao, Mueang, Saraburi 18000, Thailand, is committed to handling personal data with care and transparency.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to personal data collected through this website and in the course of client engagements.

This policy is governed by Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have questions about this policy, contact us at privacy@saraburid.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: Full name, role or title, company name
• Contact data: Email address, telephone number, business address
• Enquiry data: The content of messages or enquiries submitted through the website contact form
• Project data: Contract documents and project information shared in the course of an engagement
• Technical data: IP address, browser type, device type, pages visited (collected via analytics cookies where consented)

Legal basis for processing: Data is processed on the basis of consent (where provided), performance of a contract or pre-contract steps, and our legitimate interest in responding to enquiries and delivering legal services.

3. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries received through the website or by email or telephone
• Conducting conflict-of-interest checks prior to engagement
• Preparing and executing engagement letters and delivering legal services
• Communicating about ongoing engagements and delivering written deliverables
• Maintaining records in compliance with professional and legal obligations
• Website analytics and improvement (where cookie consent has been given)

We do not use personal data for marketing purposes without explicit consent. We do not sell personal data to third parties.

4. Data Retention

We retain personal data for the period necessary for the purpose for which it was collected:

• Enquiry data (no engagement): Deleted within 6 months of last contact
• Engagement data: Retained for 7 years following the conclusion of the engagement, in accordance with standard professional record-keeping practice
• Analytics data: Retained for up to 26 months, subject to cookie consent settings

5. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted transmission of data (HTTPS)
• Access controls limiting data access to authorised personnel
• Secure storage of engagement files and correspondence
• Confidentiality provisions in all engagement letters

In the event of a personal data breach that is likely to result in risk to individuals, we will notify the relevant authority and affected individuals in accordance with PDPA requirements.

6. Cookies

This website uses cookies. Essential cookies are required for basic site functionality. Analytics and preference cookies are used only where consent has been given through the cookie consent mechanism on the site.

For full details on the cookies used and how to manage your preferences, see our Cookie Policy.

7. Third-Party Services and Sharing

We may share data with the following categories of third parties where necessary:

• Website hosting and analytics providers — who process data on our behalf under appropriate data processing agreements
• Professional advisers — where necessary in the delivery of legal services
• Regulatory authorities — where required by law or professional obligation

We do not transfer personal data outside Thailand without appropriate safeguards. This website may contain links to third-party sites. We are not responsible for the privacy practices of those sites.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate personal data
• Right to erasure — to request deletion of personal data where there is no longer a lawful basis for processing
• Right to data portability — to receive personal data in a structured, commonly used format
• Right to object — to object to processing carried out on the basis of legitimate interest
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time

To exercise any of these rights, contact us at privacy@saraburid. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Children's Privacy

Our services are directed at businesses and professional users. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through this site, contact us at privacy@saraburid and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. Continued use of this website following an update constitutes acceptance of the revised policy. For material changes, we will make reasonable efforts to notify affected individuals.

11. Contact for Data Matters

For any questions or requests relating to personal data, contact: