Privacy Policy

1. Introduction

Thida Niti ("we", "us", "our") is a registered legal practice based at 21 Thalang Road, Talat Yai, Phuket 83000, Thailand. We provide legal support services in the field of pension protection.

This Privacy Policy explains how we collect, use, store, and protect personal data that we obtain in connection with our services and through our website. It also sets out your rights in relation to that data.

We take our obligations under Thai data protection law, including the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), seriously. If you have questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

2.1 Data You Provide Directly

• Name and contact details (email address, phone number)
• Postal address, where relevant to your matter
• Details of your pension matter, as provided in consultations, correspondence, or forms
• Employment history and financial details, where necessary for claim preparation or representation
• Identity documents, where required to verify your identity or act on your behalf

2.2 Data Collected Automatically

• Website usage data via analytics cookies (page views, time on page, browser type)
• IP address and device information
• Cookie preferences stored in your browser

2.3 Legal Basis for Processing

We process personal data on the following bases: performance of a contract or pre-contractual steps (where you engage or enquire about our services); compliance with a legal obligation; and our legitimate interest in operating and improving our practice. Where we rely on consent (e.g. for marketing communications), you may withdraw that consent at any time.

3. How We Use Your Data

• To respond to your enquiries and provide the legal services you have requested
• To prepare documentation, draft correspondence, and manage your matter
• To communicate with relevant institutions on your behalf, where instructed
• To comply with regulatory obligations, including those applicable to legal practices in Thailand
• To maintain records as required by law or professional regulations
• To improve our website and services through anonymised analytics data
• To send service-related communications (appointment reminders, updates on your matter)

We do not sell, rent, or pass your personal data to third parties for marketing purposes. We do not send unsolicited marketing messages.

4. Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access, disclosure, or destruction. These include:

• Encrypted storage for digital client records
• Access controls limiting file access to advisers assigned to each matter
• Secure handling and disposal of physical documents
• Password-protected systems with regular access reviews

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant authority and, where required, you directly, within the timeframes required by applicable law.

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Client matter files are retained for a minimum of seven years following the close of the matter, in line with professional obligations
• Enquiry records where no engagement follows are retained for twelve months
• Website analytics data is retained in anonymised form for up to twenty-four months
• Cookie consent records are retained for twelve months

6. Cookies

Our website uses cookies to support basic functionality and, where consent is given, to understand how the site is used. Essential cookies cannot be declined as they are necessary for the site to operate. Analytics and preference cookies are optional and subject to your consent. For full details, see our Cookie Policy.

7. Your Rights

Under the PDPA and applicable Thai law, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may request deletion of your data where we no longer have a lawful basis to retain it.
• Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may include links to external websites, including government bodies and institutions relevant to pension matters. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing personal data.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have received data from a minor without appropriate parental consent, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Last Updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify current clients. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.