Privacy Policy

1. Introduction

Khropkhrua Tham ("we", "us", "our") is committed to handling your personal information with care and discretion. This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to personal data collected via our website at khropkhr.sbs, through our contact form, and in the course of providing our family law services in Thailand. We operate under the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number — provided when you complete our contact form or contact us directly.
• Communications: the content of messages and enquiries you send to us.
• Service-related information: information you share with us in the course of a consultation or legal engagement.
• Technical data: IP address, browser type, pages visited — collected automatically via cookies and analytics tools.

Legal basis for processing: We process contact data on the basis of your consent (enquiry form submission) and legitimate interest (responding to enquiries). Service data is processed under the performance of a contract. Technical data is processed under legitimate interest for website operation and improvement.

3. How We Use Your Data

• To respond to your enquiries and provide the services you have requested.
• To communicate with you during an ongoing legal engagement.
• To maintain records required for legal and compliance purposes.
• To improve our website and services using anonymised analytics data.
• To send follow-up communications where you have consented to receive them.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with professional advisers (e.g. translators, court-appointed officers) where necessary for service delivery, under confidentiality obligations.

Retention: Contact enquiry data is retained for 12 months. Data relating to legal engagements is retained for a minimum of 7 years in accordance with Thai legal professional obligations, unless a shorter period applies.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who within the practice can view client data
• Secure storage of physical and digital case files
• Regular review of data handling practices

In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authority as required under the PDPA.

5. Cookies

Our website uses cookies for essential functionality and anonymous analytics. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the site to function.

6. Your Rights Under Thai PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data held by us:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data.
• Right to erasure: You may request deletion of your data where there is no legal basis for retention.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You may contact the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately before providing any personal data.

8. Children's Privacy

Our services are intended for adults (18 years of age or older). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] so we can take prompt action.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via a notice on our website. Continued use of our site or services after such notice constitutes acceptance of the updated policy. The current version is always available at this page.

10. Contact — Data Controller

For any privacy-related enquiries, please contact: