Privacy Policy

Last Updated: 10 February 2025 · Dharma Krung, Bangkok, Thailand

Dharma Krung ("we," "our," or "us") is committed to handling your personal data with care, transparency, and in compliance with applicable Thai law — including the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This Privacy Policy explains how we collect, use, store, and protect the information you provide when interacting with our firm or using our website.

1. Who We Are

Dharma Krung is a legal practice registered in Bangkok, Thailand, operating from 71 Sathorn Tai Road, Sathorn, Bangkok 10120. We are the data controller for personal information collected through our website and legal services engagements. For privacy-related enquiries, please contact us at [email protected].

2. What Personal Data We Collect

Information you provide directly:

• Full name and contact details (email address, telephone number)
• Business name and role
• Information about your legal matter shared during consultation or correspondence
• Payment details where fees are transacted directly

Information collected automatically:

• Browser type and operating system
• Pages visited and time spent on our website
• IP address and approximate geographic location
• Referring URL (how you arrived at our site)
• Cookie data (see Section 6 and our Cookie Policy)

3. Legal Basis for Processing

We process your personal data on the following lawful grounds under the PDPA:

• Consent: Where you have explicitly agreed, such as when submitting a contact form or accepting cookies
• Contract: Where processing is necessary to fulfil a legal engagement agreement between us
• Legitimate Interest: For website analytics and improving our services, where this does not override your rights
• Legal Obligation: Where Thai law requires us to retain or disclose information

4. How We Use Your Data

• To respond to enquiries and conduct initial consultations
• To carry out legal services as agreed in a letter of engagement
• To communicate updates relevant to your matter
• To improve the functionality and content of our website
• To comply with professional and statutory obligations

We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your consent.

5. Data Retention

Client files and engagement records are retained for a minimum of 7 years following the close of a matter, in accordance with professional practice standards and potential limitation periods under Thai law. Website contact form submissions are retained for 12 months unless converted into an active engagement file. Anonymised analytics data may be retained indefinitely.

6. Cookies

Our website uses cookies to operate correctly and to understand how it is used. Essential cookies are always active. Optional cookies — including analytics and preference cookies — are activated only with your consent. Full details are provided in our Cookie Policy.

7. Data Protection Measures

• All client files are stored on encrypted, access-controlled systems
• Physical documents are stored in secured premises at our Sathorn office
• Access to client data is restricted to the practitioner assigned to the matter
• All team members are bound by confidentiality obligations
• In the event of a data breach, affected individuals will be notified in accordance with PDPA obligations

8. Third-Party Services

We may use third-party services that process data on our behalf, including:

• Website analytics providers (e.g. Google Analytics — data processed in accordance with their own privacy terms)
• Cloud storage and document management services operating under data processing agreements
• Email and communication platforms used for client correspondence

All third-party processors are selected with regard to their data protection standards. We do not share identifiable client information with third parties without consent, except where required by law.

9. Your Rights Under the PDPA

As a data subject under Thai law, you have the following rights:

• Right to Access: Request a copy of personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data, subject to legal retention requirements
• Right to Restriction: Request that we limit processing of your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee.

10. Children's Privacy

Our services are directed at businesses and adult individuals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have done so, we will delete the relevant data promptly.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website following any update constitutes acceptance of the revised policy.

13. Contact Us

For any questions about this Privacy Policy or how we handle your data:

• Email: [email protected]
• Address: 71 Sathorn Tai Road, Sathorn, Bangkok 10120, Thailand
• Telephone: +66 2 286 3914