Privacy Policy

1. Introduction

Ratana Niti ("we", "us", "our") is a legal practice registered in Thailand, with offices at 88 Rama IV Road, Pathum Wan, Bangkok 10330. We are committed to handling personal data with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

This policy sets out how we collect, use, store, and protect personal information provided to us through our website, contact forms, and in the course of providing legal services. It applies to all data subjects whose information we hold, including website visitors, prospective clients, and existing clients.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

Through the contact form on our website:

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content, which may include details about your pension matter (optional)

In the course of providing legal services:

• Employment history and pension contribution records
• Correspondence with pension bodies and government departments
• Financial information relevant to entitlement calculations
• Medical information, where relevant to an appeal on health grounds
• Identity documents and official records as required for case work

Automatically through the website:

• Basic website usage data via analytics cookies (if consent is given)
• IP address and browser information for security purposes

Legal basis for processing: We process personal data on the basis of contractual necessity (to deliver the services requested), legitimate interest (to maintain records and communicate about your matter), and consent (for optional cookies and marketing).

Retention period: Client matter records are retained for seven years from the close of an engagement, as required by Thai professional conduct standards. Website contact form submissions not progressing to a formal engagement are deleted after 12 months.

3. How We Use Your Data

We use personal data only for the purposes for which it was provided or collected:

• To respond to enquiries made through our contact form
• To assess your matter and provide legal advice and services
• To prepare and submit correspondence or formal documents on your behalf
• To communicate case progress at agreed intervals
• To comply with our professional obligations under Thai law
• To improve the functionality and content of our website (analytics, if consented)

We do not use your personal data for direct marketing without your explicit consent. We do not sell, rent, or disclose personal data to third parties for their own marketing purposes.

Third-party sharing: We may share data with government bodies, courts, or administrative tribunals as part of representing your interests — only with your knowledge and as required for the matter. We use Google Analytics (if cookies are accepted) for anonymised website usage data.

4. Data Protection Measures

• Our website uses HTTPS encryption for all data transmitted via the contact form
• Client files are stored on secure, access-controlled servers in Thailand
• Access to client records is restricted to the adviser responsible for the matter
• Physical documents are stored in locked filing with restricted access
• In the event of a data breach, affected individuals will be notified within 72 hours in accordance with PDPA requirements
• We review our data security practices annually

5. Cookies

Our website uses cookies in the following categories:

• Essential cookies — required for basic site functionality. Always active.
• Analytics cookies — used to understand how visitors use the site (e.g., Google Analytics). Active only with your consent.
• Preference cookies — remember your settings between visits. Active only with your consent.

You can manage cookie preferences at any time via our Cookie Policy page.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of rectification — to request correction of inaccurate data
• Right of erasure — to request deletion of your data, subject to legal retention requirements
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time for processing based on consent
• Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external resources, including government websites or official information sources. We are not responsible for the privacy practices of these sites and recommend reviewing their policies directly.

8. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted information through our website, we will delete it promptly.

9. Policy Updates

This policy may be updated periodically to reflect changes in law or our practices. The date of the most recent revision is displayed at the top of the page. Where changes are material, we will notify existing clients by email.

10. Data Controller Contact

Data Controller: Ratana Niti

Address: 88 Rama IV Road, Pathum Wan, Bangkok 10330, Thailand

Privacy enquiries: [email protected]

Supervisory Authority: Personal Data Protection Committee (PDPC), Thailand — www.pdpc.or.th