Legal
Privacy Policy
Last Updated: 15 April 2025 · Garuda Counsel, Bangkok, Thailand
Garuda Counsel is committed to handling the personal information of its clients and contacts with care and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and other applicable data protection obligations. This policy explains what data we collect, how we use it, and what rights you hold in respect of it.
1. Data Controller
The data controller responsible for your personal information is Garuda Counsel, 156 Sathorn Road, Si Lom, Bang Rak, Bangkok 10500, Thailand. For any data-related enquiry, contact us at [email protected].
2. Information We Collect
We collect personal data that you provide to us directly, including:
- Your name, email address, and telephone number (from enquiry forms and correspondence)
- Pension and employment records you share with us for the purpose of our services
- Information about your contribution history, employment periods, and jurisdiction of employment
- Correspondence between you and our office
- Technical data collected automatically when you visit our website (browser type, pages visited, approximate location), subject to your cookie preferences
3. Legal Basis for Processing
We process personal data on the following grounds:
- Performance of a contract: where processing is necessary to deliver the legal service you have engaged us to provide
- Legitimate interest: for correspondence, website security, and improving our services
- Consent: for optional communications and non-essential cookies, which you may withdraw at any time
- Legal obligation: where required by Thai law or professional regulatory obligations
4. How We Use Your Information
- To deliver the legal services described in our engagement letter
- To respond to enquiries submitted through our website or by email
- To prepare and transmit documents to relevant authorities on your behalf
- To maintain records of our professional work as required by Thai professional obligations
- To improve and maintain our website
5. Data Retention
We retain client matter files for seven years from the conclusion of the engagement, in accordance with Thai professional obligations. Website enquiry data is retained for two years from receipt. You may request earlier deletion of non-mandatory records by contacting us at the address below.
6. Sharing of Personal Data
We do not sell or rent personal data. We may share information in the following circumstances only:
- With administering pension authorities, where doing so is necessary to deliver the service you have instructed
- With third-party document providers engaged to support a specific matter, under confidentiality obligations
- Where required by Thai law, court order, or regulatory requirement
We do not transfer personal data outside Thailand except where necessary to contact overseas pension authorities for cross-border pension matters, in which case we inform you before doing so.
7. Cookies
Our website uses essential cookies to maintain basic functionality and optional analytics cookies to understand how the site is used. You may manage your cookie preferences through the banner shown on your first visit or at any time via our Cookie Policy page.
8. Security Measures
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or disclosure. Client documents are stored on access-controlled systems. Staff with access to personal data are subject to confidentiality obligations.
9. Your Rights Under the PDPA
Under Thailand's Personal Data Protection Act, you have the following rights:
- Right to access the personal data we hold about you
- Right to rectification of inaccurate data
- Right to erasure of data no longer necessary for its original purpose
- Right to restriction of processing in certain circumstances
- Right to data portability in a structured, commonly used format
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing
- Right to lodge a complaint with the Personal Data Protection Committee of Thailand
To exercise any of these rights, write to us at [email protected]. We will respond within thirty days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their own policies before providing personal information.
11. Children's Privacy
Our services are directed at adults aged eighteen and over. We do not knowingly collect personal data from minors. If we become aware that we hold data relating to a person under eighteen, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy when our practices change or when legal requirements are revised. Material changes will be noted at the top of this page with an updated date. Continued use of our services following any update constitutes acceptance of the revised policy.
13. Contact
For any privacy-related matter, write to us at:
- Email: [email protected]
- Post: Garuda Counsel, 156 Sathorn Road, Si Lom, Bang Rak, Bangkok 10500, Thailand