Legal
Privacy Policy
Last Updated: 15 May 2025 | Effective: 15 May 2025
This policy sets out how Suk Legal ("we", "us", "our") collects, uses, and protects personal data when you use our website or engage our legal services. We take privacy seriously and handle all personal information with care and discretion, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and our professional obligations as a registered legal practice.
Questions about this policy may be directed to [email protected].
1. Who We Are
Suk Legal is a legal practice registered in Thailand, operating at 56/8 Sathorn Road, Thung Maha Mek, Sathon, Bangkok 10120. We act as data controller for personal data processed in connection with our services and this website. Our solicitors are registered with the Thai Bar Council and are subject to its professional conduct requirements, which include strict rules on client confidentiality.
2. Personal Data We Collect
We collect personal data only when it is necessary for the purposes described in this policy. The types of data we may collect include:
- Identity data: name, preferred title, nationality
- Contact data: email address, telephone number, postal address
- Pension and financial data: information about your pension arrangements, employment history, and relevant financial circumstances, provided by you when seeking advice or engaging our services
- Website usage data: pages visited, approximate location, browser type, referring page (collected via cookies and analytics tools — see Section 6)
- Correspondence: content of emails, messages, and other communications sent to us
We do not collect sensitive personal data (such as health information or political opinions) unless it is directly relevant to a pension matter you have asked us to assist with, and you have provided it voluntarily.
Legal basis for processing: We process personal data on the basis of your consent (for marketing communications), performance of a contract or pre-contractual steps (for service delivery), legitimate interests (for website analytics and fraud prevention), and compliance with legal obligations (for regulatory and professional requirements).
Retention: Client matter files are retained for a minimum of five years following the close of an engagement, in line with professional and regulatory requirements. Website enquiry data not resulting in an engagement is held for up to twelve months.
3. How We Use Personal Data
- To respond to enquiries and provide legal consultations and services you have requested
- To prepare and manage legal documents, correspondence, and representations on your behalf
- To fulfil our professional and regulatory obligations as a registered legal practice
- To send service-related communications (appointment confirmations, matter updates)
- To send marketing communications about our services, where you have given consent — with a clear option to withdraw consent at any time
- To analyse website usage and improve the user experience (using anonymised or aggregated data where possible)
- To comply with applicable law, court orders, or requests from authorised Thai authorities
We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.
4. Sharing Personal Data
We may share personal data with:
- Professional advisers: other solicitors, barristers, translators, or specialist consultants where necessary for your matter, subject to confidentiality obligations
- Regulatory and pension authorities: where required to pursue or defend a claim or to comply with legal requirements
- Technology service providers: website hosting, email, and analytics providers, operating under data processing agreements with appropriate safeguards
- Law enforcement or courts: where required by applicable Thai law or court order
Where data is transferred outside Thailand, we take steps to ensure that appropriate protections are in place, consistent with PDPA requirements and guidance from the Personal Data Protection Committee.
5. Data Security
We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These include:
- Encrypted transmission of data via HTTPS
- Access controls limiting data access to authorised staff with a need to know
- Secure document storage and disposal practices
- Regular review of access permissions and security practices
In the event of a personal data breach that is likely to result in risk to your rights or freedoms, we will notify you and the relevant authorities as required under the PDPA, without undue delay.
6. Cookies
Our website uses cookies to function correctly and to understand how visitors use it. These include essential cookies (required for the site to operate) and optional analytics cookies. You can manage your cookie preferences via the cookie notice displayed on your first visit, or at any time through our Cookie Policy page.
7. Your Rights Under the PDPA
As a data subject under Thailand's PDPA, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data in certain circumstances
- Right to portability: to receive your data in a structured, commonly used format
- Right to object: to object to processing based on legitimate interests
- Right to restrict processing: in certain circumstances
- Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting prior processing
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), the supervisory authority in Thailand.
8. Third-Party Links
Our website may contain links to external sites or resources. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies separately. This policy applies only to suklegalbkk.com and our direct communications with you.
9. Children
Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have received data from a minor, please contact us at [email protected] so that it can be removed promptly.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will publish a notice on our website or notify you by email where appropriate. Continued use of our website or services following any update constitutes acceptance of the revised policy.
11. Contact
For any privacy-related questions or to exercise your rights, please contact us:
- Email: [email protected]
- Post: Suk Legal, 56/8 Sathorn Road, Thung Maha Mek, Sathon, Bangkok 10120, Thailand