Privacy Policy

1. Introduction

Bodhi Legal ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how it is used and protected, and what rights you have in relation to it.

This Policy applies to information collected through this website and in the course of our legal services. It is prepared in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable professional conduct requirements for legal practitioners in Thailand.

Questions relating to this Policy may be directed to [email protected].

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: full name, date of birth (where relevant to a matter)
• Contact data: email address, telephone number, postal address
• Matter-related data: employment history, pension records, correspondence with government bodies, financial details relevant to proceedings
• Website usage data: IP address, browser type, pages visited, time on site (collected via analytics tools)
• Cookie data: preferences stored in your browser as described in our Cookie Policy

Legal basis for processing: Data collected in connection with the provision of legal services is processed on the basis of contract performance (Section 24(3) PDPA) and, where applicable, legal obligation. Website usage data is processed on the basis of consent. Where processing is based on consent, you may withdraw that consent at any time.

Retention: Client matter files are retained for a minimum of seven years following the conclusion of a matter, in accordance with professional conduct requirements. Website usage data is retained for up to 24 months. Enquiry data from individuals who did not proceed to a formal engagement is retained for 12 months and then deleted.

3. How We Use Your Data

Personal data collected through this website and in the course of our services is used for the following purposes:

• To respond to enquiries submitted through this website
• To provide, manage, and administer legal services agreed under an engagement letter
• To communicate with clients regarding the progress of their matters
• To comply with legal obligations, including professional conduct and record-keeping requirements
• To analyse website usage and improve this site's content and performance

We do not sell personal data to third parties and do not use client data for marketing purposes without explicit consent. We do not send unsolicited marketing communications.

Third-party sharing: We may share data with third-party service providers who assist in the operation of this website (such as hosting and analytics providers) and, where necessary for the conduct of a matter, with relevant administrative bodies, courts, or opposing parties — always with appropriate notice to the client.

4. Data Protection Measures

Bodhi Legal applies the following measures to protect your personal data:

• Access to client files is restricted to counsel and authorised staff directly involved in the relevant matter
• Digital files are stored on password-protected, encrypted systems
• Physical documents are stored in locked facilities
• Data transmission through this website is encrypted via HTTPS
• In the event of a data breach that creates a risk to the rights and freedoms of data subjects, we will notify the relevant supervisory authority within 72 hours of becoming aware, and notify affected individuals without undue delay where required

5. Cookies

This website uses cookies to support basic functionality and to collect anonymised usage data. For a full explanation of the cookies used and how to manage your preferences, please refer to our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right to access: to request confirmation of whether we hold your data and to obtain a copy of it
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of data that is no longer necessary, subject to legal and professional retention obligations
• Right to data portability: to receive a copy of your data in a structured, commonly used format
• Right to object: to object to processing carried out on the basis of legitimate interest
• Right to withdraw consent: where processing is consent-based, to withdraw that consent at any time
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Please note that some rights are subject to limitations where retention is required by law or professional obligation.

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies. The presence of a link does not constitute an endorsement.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that data from a minor has been collected without parental consent, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Where changes are material, we will take reasonable steps to inform users — for example, by displaying a notice on this site. Continued use of this website following a change constitutes acceptance of the updated Policy.

10. Contact

Data controller: Bodhi Legal
145 Wireless Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand

Privacy enquiries: [email protected]