Legal

Privacy Policy

Last Updated: 14 April 2025

Khantha Law is committed to handling personal data with the same care it applies to its legal work — clearly, candidly, and with full respect for each individual's rights. This policy describes how we collect, use, and protect information in connection with our pension legal services.

1. Who We Are

Khantha Law is a legal practice based at 234/5 Phra Athit Road, Phra Borom Maha Ratchawang, Bangkok 10200, Thailand. We are the data controller for personal data processed in connection with our services. For data-related enquiries, contact us at [email protected].

2. Data We Collect

We collect and process the following categories of personal data:

Contact information: name, email address, telephone number, postal address
Employment and contribution records: employer history, contribution periods, social security or pension fund records — provided by clients in connection with their matter
Family and relationship information: where relevant to survivor claims or dependant entitlements
Communications: emails, letters, and records of consultations
Website data: IP addresses, browser type, pages visited — collected through cookies, subject to your consent

3. How We Collect Data

Directly from you via our contact form, email, or in-person consultations
From third parties with your knowledge, such as employers, government offices, or family members acting on your behalf
Automatically via cookies when you visit our website (subject to your cookie preferences)

4. Legal Basis for Processing

We process personal data on the following legal grounds under Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019):

Contractual necessity: to provide the legal services you have engaged us for
Legitimate interests: to maintain records of our work, manage our practice, and communicate with clients
Consent: for optional cookies and marketing communications, where applicable
Legal obligation: where retention or disclosure is required by Thai law

5. How We Use Your Data

To assess and handle your pension legal matter
To communicate with you about your matter and about related procedural steps
To prepare and submit documentation on your behalf to relevant authorities
To maintain records of engagements and outcomes for legal and professional purposes
To improve our website and understand how visitors engage with our content (analytics, subject to consent)

6. Data Sharing

We do not sell personal data. We share data only in the following circumstances:

With relevant authorities: the Social Security Office, Government Pension Fund, administrative courts, or other bodies — as required to progress your matter
With professional advisors: where specialist input is required, with your knowledge
With service providers: such as email hosting or document management tools, subject to data processing agreements
As required by law: in response to lawful requests from Thai courts or regulatory authorities

7. Data Retention

Client matter files are retained for a minimum of 10 years after the conclusion of the engagement, in accordance with professional and legal requirements. Website analytics data is retained for up to 14 months. Contact form submissions are retained for 2 years if no engagement results.

8. Data Protection Measures

Client files are held in secure, access-controlled systems
Email communications involving sensitive personal data are transmitted using standard encryption protocols
Access to client data within the practice is limited to the practitioner responsible for the matter
In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required by the PDPA

9. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. For full information on how cookies are used and how to manage your preferences, see our Cookie Policy.

10. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

Right of access: to request a copy of personal data we hold about you
Right to rectification: to request correction of inaccurate data
Right to erasure: to request deletion where data is no longer necessary, subject to legal retention requirements
Right to restrict processing: in certain circumstances
Right to data portability: where processing is based on consent or contract
Right to object: to processing based on legitimate interests
Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you consider that our processing does not comply with the PDPA, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are directed to adults aged 18 and over. We do not knowingly collect personal data from persons under 18 without the consent of a parent or guardian.

13. Changes to This Policy

We may update this policy from time to time. The current version will always be available on our website. Where changes are material, we will notify active clients directly. Continued use of our services following an update constitutes acceptance of the revised policy.

14. Contact

For any questions about this policy or about how we handle your data:

Email: [email protected]
Address: 234/5 Phra Athit Road, Phra Borom Maha Ratchawang, Bangkok 10200, Thailand
Telephone: +66 91 462 8157