Privacy Policy

1. Introduction

Bamnan Law ("we", "us", "our") is committed to handling personal data with care and transparency. This policy describes what information we collect, why we collect it, and how it is used and protected. It applies to all individuals who contact us, use our services, or visit our website at bamnanlaw.world.

We are the data controller for information collected through this website and in the course of providing legal services. If you have questions about this policy, you may contact us at [email protected].

2. Data We Collect

We collect the following types of personal data:

• Contact information: Name, email address, phone number — when provided through our contact form or by email.
• Matter-related information: Details you share about your pension situation, employment history, or documents during a consultation or engagement.
• Website usage data: Pages visited, approximate location (country level), device type — collected through analytics cookies if you have consented.
• Communications: Email and written correspondence relating to your matter.

We do not collect sensitive personal data (such as health information) except where directly relevant to a matter and with your explicit consent.

3. Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process personal data on the following bases:

• Contract performance: To provide the legal services you have requested.
• Legitimate interests: To respond to enquiries, maintain records, and improve our services.
• Consent: For analytics and marketing cookies, where you have given consent through our cookie preferences.
• Legal obligation: Where we are required by law to retain or disclose information.

4. How We Use Your Data

Personal data collected is used to:

• Respond to enquiries and arrange consultations
• Provide the legal services described in our engagement letter
• Maintain records of matters handled, as required by professional obligations
• Understand how our website is used and improve its content
• Comply with legal and regulatory requirements

We do not sell personal data to any third party, and we do not use it for advertising or profiling purposes.

5. Data Retention

Contact enquiries not resulting in an engagement are retained for up to twelve months. Matter files for completed engagements are retained for seven years from the date of closure, as required by professional standards. Website analytics data is retained for twenty-four months.

6. Data Sharing

We share personal data only in the following circumstances:

• Government offices: Where necessary to conduct your matter (e.g., Social Security Office, Government Pension Fund), and only information directly relevant to the matter.
• Analytics providers: Anonymised website usage data with analytics service providers, if you have consented to analytics cookies.
• Legal obligation: Where disclosure is required by Thai law or by a court order.

We do not share matter-related information with any third party without your explicit consent, except as required by law.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Client files are stored in password-protected systems. Physical documents are held in locked storage. Access is restricted to those with a direct need.

In the event of a data breach that may affect your rights, we will notify you as required under the PDPA.

8. Cookies

We use cookies on this website. Details of the types of cookies used, their purpose, and how to manage your preferences are set out in our Cookie Policy.

9. Your Rights

Under the PDPA and applicable Thai law, you have the following rights regarding your personal data:

• Access: To request a copy of the personal data we hold about you.
• Rectification: To ask us to correct inaccurate or incomplete data.
• Erasure: To request deletion of data we no longer need to retain.
• Portability: To receive your data in a structured, commonly used format where applicable.
• Objection: To object to processing based on legitimate interests.
• Withdraw consent: To withdraw consent for analytics cookies at any time through our Cookie Policy page.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee.

10. External Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

11. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18 without parental consent.

12. Updates to This Policy

We may update this policy from time to time. Significant changes will be communicated via a notice on our website. The date at the top of this page reflects the most recent revision.

13. Contact

Data controller: Bamnan Law
73 Ratchadamnoen Road, Phra Nakhon, Bangkok 10200, Thailand
Email: [email protected]
Phone: +66 2 559 34 78