§ 10Policy
Privacy policy
Last updated 1 Oct 2026
A sample policy under Thailand's PDPA (2019). Replace the [bracketed] text and have it checked before publishing.
Data controller
[Legal entity], [address], [email], is the controller of personal data collected through this website.
What we collect
Name, phone, email, the area of your enquiry, the other party's name and your message, plus general usage data [list analytics tools, if any].
Purpose and legal basis
To run conflict checks, reply and arrange meetings — based on your consent and steps taken at your request before a contract.
Retention
Enquiries that don't become matters are kept for up to [12 months]; client files as required by law and professional rules.
Sharing
We never sell your data. We may share it with necessary processors such as our form service [provider] under data-protection terms.
Your rights
You may ask to access, correct or delete your data, object, or withdraw consent by contacting [DPO email], and complain to the Personal Data Protection Committee.