Privacy Policy

1. Introduction

Kittikorn Legal Services ("we", "our", "us"), located at 129 Thanon Chang Khlan, Chang Khlan, Mueang, Chiang Mai 50100, Thailand, is committed to handling your personal information with care and in compliance with the Personal Data Protection Act B.E. 2562 (PDPA), Thailand's primary data protection legislation.

This policy applies to all personal information collected through our website and through our legal services engagement process. If you have questions, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact details: full name, email address, and telephone number
• Details provided voluntarily in contact form messages
• Documents shared for the purpose of pension case review (identity documents, employment records, Social Security Fund statements)
• Basic website usage data collected via cookies (see Section 5)

Legal basis: We process personal data with your consent (when you submit a contact form), to perform a service you have requested, and in pursuit of our legitimate interest in providing pension legal advice. Sensitive documents are processed only under explicit consent, which we obtain in writing before any case begins.

Retention: Contact enquiries are retained for 12 months. Case documents are retained for 5 years from case closure in line with professional obligations, then securely deleted.

3. How We Use Your Data

• To respond to enquiries submitted via our contact form
• To deliver the legal service you have engaged us for
• To correspond with pension authorities on your behalf (only with your explicit agreement)
• To comply with our professional legal obligations and record-keeping requirements
• To improve our website using anonymised analytics data

We do not use your data for marketing purposes without your separate consent. We do not sell your data to any third party.

4. Data Sharing

We share personal data only where necessary:

• With government bodies (Social Security Office, Government Pension Fund), where required to pursue your case and with your explicit consent
• With professional service providers who support our practice (secure cloud storage, email hosting) under data processing agreements
• Where required by Thai law or court order

We do not transfer personal data outside Thailand without appropriate safeguards in place.

5. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. You can manage your cookie preferences through the banner displayed on first visit. For full details, please see our Cookie Policy.

6. Data Protection Measures

• All digital files are stored on encrypted servers with access restricted to authorised staff
• Physical documents are stored in locked storage at our Chiang Mai office
• Staff handling client data receive regular data protection guidance
• In the event of a personal data breach, we will notify affected individuals and, where required, the relevant supervisory authority within the timeframes specified by Thai law

7. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Access: To request a copy of the personal data we hold about you
• Rectification: To ask us to correct inaccurate data
• Erasure: To request deletion of your data (subject to legal retention obligations)
• Portability: To receive your data in a portable format where technically feasible
• Object: To object to processing based on legitimate interest
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Complaint: To lodge a complaint with Thailand's Personal Data Protection Committee (PDPC)

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external resources (government offices, professional bodies). We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing personal information.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated via a notice on our website. The date at the top of this page reflects the most recent revision. Continued use of our website after any change constitutes acceptance of the revised policy.

11. Contact for Data Enquiries

Data Controller: Kittikorn Legal Services

Address: 129 Thanon Chang Khlan, Chang Khlan, Mueang, Chiang Mai 50100, Thailand

Email: [email protected]