Legal Documentation

Privacy Policy

Khao Legal is committed to handling your personal information with care and transparency. This policy explains what information we collect when you contact us or use our services, why we collect it, and the rights you have in relation to it.

Last updated: 15 April 2025  ·  Effective: 15 April 2025

1. Introduction

Khao Legal ("we", "us", "our") is a family law practice based in Bangkok, Thailand. We act as the data controller in respect of personal information collected through this website and through our direct client intake process.

This policy applies to information collected via our website at khaolega.live, through our contact form, by telephone, and in the course of providing legal services. Our processing of personal data is conducted in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

If you have questions about this policy or about how we handle your information, please contact us at [email protected].

2. Information We Collect

We collect personal information only where it is necessary for the purpose at hand. The categories of information we may collect include:

  • Contact details — name, telephone number, and email address submitted via our contact form or provided directly to us.
  • Enquiry content — the nature of the matter you describe when first making contact, which may include information about family circumstances.
  • Website usage data — anonymised information collected through analytics tools, including pages visited and duration of visit.
  • Cookie data — information stored locally in your browser relating to your preferences on this site.

We do not collect sensitive personal data through our website contact form. If sensitive information becomes relevant in the course of providing legal services, separate arrangements will govern its handling under the applicable professional obligations of legal practice in Thailand.

Legal basis: Contact form submissions are processed on the basis of your consent (PDPA s. 19). Service-related processing is conducted on the basis of contractual necessity and our legitimate interests in managing client relationships. Analytics data is processed on the basis of legitimate interest.

Retention: Enquiry data where no engagement follows is retained for no longer than 12 months. Data relating to completed matters is retained for 10 years in accordance with legal record-keeping obligations.

3. How We Use Your Information

Personal information collected through this website is used for the following purposes:

  • Responding to enquiries submitted via the contact form
  • Scheduling initial consultations and managing client communication
  • Providing legal services where an engagement is established
  • Complying with our professional obligations under Thai law
  • Understanding how this website is used, in order to improve its content and structure

We do not sell personal data to third parties. We do not use personal information submitted through this site for marketing purposes without your explicit consent.

Third-party sharing: We may share limited information with service providers who support our practice operations — for example, a document management platform or an email service provider. Any such provider is required to handle information securely and only for the purposes we specify. We do not share client information with other legal practices or institutions except as required by law or with your consent.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect the information we hold. These include:

  • Encryption of data in transit via HTTPS
  • Restricted access to client records, limited to the advising lawyer and support staff directly involved in the matter
  • Password-protected document management systems
  • Regular review of data handling procedures

In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority within the timeframe required under the PDPA.

5. Cookies

This website uses cookies to support its basic functionality and to understand how visitors engage with it. Cookies are small text files stored in your browser.

  • Essential cookies — required for the site to function. These cannot be disabled.
  • Analytics cookies — used to understand how pages are used, in aggregate. No personally identifiable data is processed.
  • Preference cookies — used to remember choices you have made, such as your cookie consent selection.

You can review and manage your cookie preferences at any time on our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act B.E. 2562, you have the following rights in respect of your personal data:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to ask us to correct information that is inaccurate or incomplete.
  • Right to erasure — to request deletion of your personal data, subject to any legal retention obligations that apply.
  • Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
  • Right to object — to object to processing based on legitimate interest.
  • Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand if you consider that our processing infringes your rights.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to review the privacy notice of any external site you visit.

8. Children's Privacy

Our services are intended for persons aged 18 and over. We do not knowingly collect personal data from anyone under 18 through this website. If you believe we have inadvertently received information from a minor, please contact us and we will remove it promptly.

Where matters involve children in a family law context — for example, in stepparent recognition proceedings — any information relating to minors is handled with additional care and in accordance with applicable child protection provisions.

9. Updates to This Policy

We review this policy periodically and may update it to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy from time to time.

Continued use of this website after an update constitutes acceptance of the revised policy.

10. Contact Information

For questions, requests, or concerns relating to this policy or to your personal data, please contact us: