Privacy Policy

Introduction

thewaoyl is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our legal services and website operations.

We take data protection seriously and comply with applicable Thai data protection laws, including the Personal Data Protection Act B.E. 2562 (2019). This policy applies to all personal information we collect through our website, email communications, client engagements, and other interactions.

Information We Collect

Personal Information Provided by You

We collect personal information that you provide directly when you:

• Submit contact forms or consultation requests through our website
• Engage our legal services and provide information necessary for representation
• Communicate with us via email, phone, or in-person meetings
• Subscribe to newsletters or legal updates

This information may include: name, email address, phone number, business name, address, and any other information relevant to your legal matter or inquiry.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information:

• IP address and general location data
• Browser type and operating system
• Pages visited and time spent on our website
• Referring website or source
• Device information

This information is collected through cookies and similar technologies. For details about cookies, please see our Cookie Policy.

How We Use Your Information

We use personal information for the following purposes:

Legal Service Delivery

• Providing legal advice and representation
• Conducting due diligence and legal research
• Preparing documents and reports
• Communicating about your legal matter

Client Communication and Support

• Responding to inquiries and consultation requests
• Scheduling appointments and meetings
• Sending engagement agreements and invoices
• Providing updates on legal matters

Website Improvement and Analytics

• Understanding how visitors use our website
• Improving website functionality and user experience
• Analyzing traffic patterns and trends

Legal and Regulatory Compliance

• Complying with Thai Bar Association requirements
• Meeting legal and regulatory obligations
• Preventing fraud and maintaining security

We process personal data based on the following legal grounds: consent, contractual necessity, legal obligation, and legitimate business interests.

Data Protection and Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Secure storage of physical and electronic documents
• Encryption of sensitive data in transit and at rest
• Access controls limiting information to authorized personnel only
• Regular security assessments and updates
• Confidentiality agreements with all team members
• Secure communication channels for client correspondence

Client files and communications are subject to strict attorney-client confidentiality obligations under Thai law and professional ethics rules. We maintain these protections rigorously.

Information Sharing and Disclosure

We do not sell, rent, or trade personal information. We may share information only in the following limited circumstances:

With Your Consent

We may share information when you have provided explicit consent or directed us to do so in connection with your legal matter.

Service Providers

We may engage third-party service providers to assist with business operations, such as document storage, IT services, or accounting. These providers are bound by confidentiality agreements and may only use information to perform services on our behalf.

Legal Requirements

We may disclose information when required by law, court order, or regulatory authority, or when necessary to protect our legal rights or prevent harm.

Professional Consultants

We may consult with other legal professionals or experts when necessary for client representation, subject to confidentiality obligations.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy and comply with legal and professional obligations. Retention periods vary based on the type of information and the nature of our relationship:

• Client engagement records: Retained for at least 10 years after completion of legal services, as required by Thai Bar Association rules
• Consultation inquiries: Retained for 2 years unless an engagement is established
• Website analytics data: Retained for 24 months
• Marketing communications: Until you unsubscribe or request deletion

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Your Privacy Rights

Under Thai data protection law, you have the following rights regarding your personal information:

Right to Access

You may request confirmation of whether we hold your personal data and obtain a copy of that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data in certain circumstances, subject to legal and professional retention requirements.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format for transfer to another service provider.

Right to Object

You may object to processing of your personal data for direct marketing or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that certain rights may be limited by legal or professional obligations, particularly regarding client confidentiality and record retention requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. For detailed information about the cookies we use and how to manage your preferences, please review our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our legal services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from someone under 18, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on our website with an updated "Last Updated" date. Material changes will be communicated through prominent notice on our website or direct communication to clients.

Your continued use of our services or website after changes become effective constitutes acceptance of the revised policy.