✦ Legal

Privacy Policy

Last Updated: 14 April 2025

Andaman Legal ("we", "us", "our") operates from 88 Chao Fa West Road, Wichit, Mueang Phuket, Phuket 83000, Thailand. This policy explains how we collect, use, and protect personal data provided to us through our website or in the course of an engagement. We are committed to handling personal information with care and in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable obligations.

1. Data We Collect

We collect personal data in the following circumstances:

• Enquiry forms: Name, email address, telephone number, and any information you include in a message field when submitting an enquiry through our website.
• Engagement matters: Where you engage our services, we collect documentation and personal information necessary to carry out the work — which may include identification documents, financial records, and family registration documents depending on the service.
• Website usage: We may collect anonymised analytical data about how visitors use our website through cookie-based analytics tools, subject to your consent.

2. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our website or by telephone or email.
• Carrying out advisory or legal services you have engaged us to provide.
• Complying with our professional obligations and applicable law.
• Improving the operation of our website, where analytics data is used on an anonymised basis.

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell personal data to third parties under any circumstances.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: For optional cookie analytics and marketing communications, where you have given consent.
• Performance of a contract: Where processing is necessary to carry out a service engagement you have requested.
• Legitimate interests: For responding to website enquiries and maintaining basic records, where our legitimate interests do not override your rights.
• Legal obligation: Where processing is required to comply with applicable law or professional obligations.

4. Data Retention

Enquiry data submitted through our website is retained for twelve months from the date of submission, unless a service engagement arises from that enquiry. Client matter files are retained for seven years from the conclusion of an engagement, after which they are securely deleted. Analytics data is retained for no longer than twenty-six months.

5. Data Protection

We store data on secured servers and limit access to personal information to staff members whose work requires it. We do not transmit sensitive client documents over unencrypted channels. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant supervisory authority within the timeframe required by applicable law.

6. Cookies

We use cookies on our website. Essential cookies are required for the site to function and cannot be disabled. Optional analytics and preference cookies are used only with your consent. For full details, see our Cookie Policy.

7. Third-Party Services

Our website may include embedded content from third-party services such as Google Maps. These services may set their own cookies subject to their own privacy policies. We do not share client personal data with third-party service providers except as necessary to perform the services you have engaged us for — for example, certified translation services or the relevant government authorities.

8. Your Rights Under the PDPA

If you are a data subject under the PDPA or applicable law, you have the following rights:

• The right to be informed about how your data is used.
• The right to access a copy of the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to request erasure of data we are no longer required to retain.
• The right to data portability in structured, machine-readable form.
• The right to object to processing based on legitimate interests.
• The right to withdraw consent at any time where consent is the basis for processing.
• The right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe your rights have not been respected.

To exercise any of these rights, please contact us at [email protected].

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18 without the consent of a parent or legal guardian. Where we provide services involving minor dependants, information is collected through the adult instructing the engagement.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The current version will always be available on this page with the date of last update shown at the top. Continued use of our website following an update constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries, please contact us at:

• Email: [email protected]
• Post: Andaman Legal, 88 Chao Fa West Road, Wichit, Mueang Phuket, Phuket 83000, Thailand