Privacy Policy

1. Introduction

Anurak ("we", "our", "us") is a legal practice based at 47 Thanon Witthayu, Lumphini, Pathum Wan, Bangkok 10330, Thailand. We provide legal services focused on pension eligibility, benefit appeals, and representation before pension authorities.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website or engage our services. It applies to all individuals who contact us, visit our website, or become clients. We are committed to handling your personal information with care and in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and related regulations.

2. Data We Collect

We may collect the following personal data, depending on how you interact with us:

• Contact information: Full name, email address, telephone number, and postal address.
• Matter-related information: Documents, records, and details relevant to your pension matter (contribution histories, employment records, pension authority correspondence, financial details).
• Website data: IP address, browser type, pages visited, and time spent, collected via cookies and analytics tools.
• Communications: Records of emails, phone calls, and written correspondence with us.

We collect data directly from you (via forms, phone, in-person meetings, or email), from documents you provide, and automatically through our website's technical systems.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Thailand's PDPA:

• Contract: Where processing is necessary to provide the legal services you have engaged us for.
• Legitimate interest: For website analytics and operational purposes that do not override your privacy rights.
• Consent: For optional communications and marketing cookies, where you have provided explicit consent.
• Legal obligation: Where we are required to retain or share data by law, court order, or regulatory requirement.

4. How We Use Your Data

We use personal data to:

• Respond to enquiries and communicate with you about your matter
• Provide and manage the legal services we have agreed to deliver
• Prepare and submit documentation to pension authorities on your behalf
• Maintain records of our legal work as required by professional obligations
• Improve our website and services through analytics (where consent is given)
• Comply with legal, regulatory, and professional obligations

5. Data Sharing

We share personal data only as necessary and with appropriate safeguards in place. Recipients may include:

• Pension authorities and government offices in Thailand, as required by your matter
• Third-party service providers (e.g. secure document storage, website hosting) who are bound by data processing agreements
• Courts or regulatory bodies when required by law

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with our professional and legal obligations. Typical retention periods:

• Client matter files: 7 years from the close of the matter, in line with professional practice requirements
• Enquiries that did not proceed to engagement: 12 months
• Website analytics data: 26 months

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. This includes secure file storage, access controls, and regular review of our practices. While no system is entirely without risk, we take the security of your information seriously and act promptly if a breach is identified.

8. Cookies

Our website uses cookies to support basic functionality and, with your consent, to collect analytics data. Essential cookies cannot be disabled as they are necessary for the site to work. You can manage your preferences for optional cookies via our Cookie Policy page.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data where there is no longer a lawful basis for retaining it
• Restriction: Request that we limit the processing of your data in certain circumstances
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interest
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been upheld.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data about a person under 18, please contact us and we will take prompt steps to delete it.

11. External Links

Our website may contain links to external resources, including pension authority websites. We are not responsible for the privacy practices of those sites and recommend reviewing their own privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website or services after any changes constitutes acceptance of the updated policy. We will notify clients of material changes by email where we hold current contact details.

13. Contact for Privacy Matters

For any questions, requests, or concerns relating to this policy or to your personal data: