Privacy Policy

1. Introduction

Naga Law ("we", "us", "our") is a legal practice registered in Thailand, operating from 198 Ekkamai Road, Khlong Tan Nuea, Watthana, Bangkok 10110. We provide pension defence and pension rights legal services to individuals in Thailand.

This policy explains how we collect, use, and protect personal data provided to us through our website, by email, by telephone, or in person during consultations. We take our obligations under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) seriously and process personal data only in accordance with those obligations.

Questions about this policy may be directed to: [email protected]

2. Personal Data We Collect

We collect and process the following categories of personal data:

• Contact information: name, email address, telephone number
• Correspondence: messages submitted through our website contact form or sent by email
• Matter-related documentation: pension statements, contribution records, employment history, and authority correspondence provided to us in the course of an engagement
• Technical data: IP address, browser type, and pages visited, collected automatically through standard server logs

We do not collect sensitive personal data (such as health information, racial or ethnic origin, or financial account data) unless directly relevant to the legal matter and provided voluntarily by the client for that purpose.

3. How We Collect Data

• Directly from you, through the contact form on our website
• Through email or telephone enquiries
• During in-person consultations at our office
• From documents you provide in the course of a legal engagement
• Automatically, through cookies and server logs when you visit our website (see Section 8)

4. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent: for marketing communications, if opted into
• Contract: to deliver legal services agreed with a client
• Legitimate interest: to respond to enquiries and maintain client records
• Legal obligation: to comply with professional and regulatory requirements applicable to legal practitioners in Thailand

5. How We Use Personal Data

• To respond to enquiries submitted through the website or by other means
• To deliver the legal services agreed with you
• To maintain accurate matter files and client records
• To comply with our professional obligations as legal practitioners
• To improve the functionality and content of our website

We do not use personal data for automated decision-making or profiling.

6. Data Sharing

Personal data is shared with third parties only in the following circumstances:

• With pension authorities or government bodies, where required to conduct the legal matter and with the client's knowledge
• With professional advisers (accountants, translators) engaged to assist with a specific matter, under confidentiality obligations
• Where required by Thai law, court order, or regulatory authority

We do not sell personal data to third parties or share it for commercial purposes.

7. Data Retention

We retain personal data for the following periods:

• Enquiries that did not lead to an engagement: up to 12 months from the date of last contact
• Client matter files: 7 years from the conclusion of the matter, in accordance with standard legal practice requirements
• Website server logs: up to 12 months

After the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies

Our website uses cookies to support basic functionality and, where consent is given, to understand how visitors use the site. Cookies are small text files stored in your browser. We use the following categories:

• Essential cookies: necessary for the website to operate correctly; cannot be disabled
• Analytics cookies: used to understand page visits and user behaviour, only if consent is given
• Preference cookies: used to remember cookie consent choices

Full details are available in our Cookie Policy.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted transmission (HTTPS) for all website communications
• Access controls restricting matter files to the counsel assigned to that engagement
• Secure physical storage for paper documents
• Regular review of data handling practices

In the event of a data breach that may affect your rights or freedoms, we will notify you and the relevant supervisory authority as required under the PDPA.

10. Your Rights Under the PDPA

As a data subject under Thai law, you have the following rights:

• The right to be informed about how your data is processed
• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data (subject to legal retention obligations)
• The right to object to processing based on legitimate interest
• The right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
• The right to data portability where processing is automated
• The right to lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may include links to external sites, including those of pension authorities and government bodies. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us promptly so that we may take appropriate action.

13. Changes to This Policy

We may update this policy from time to time. When changes are material, we will update the "Last updated" date at the top of this page. Continued use of our website or services following notification of changes constitutes acceptance of the revised policy.

14. Contact Information

Data controller: Naga Law
Address: 198 Ekkamai Road, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 415 9268