Privacy Policy

1. Introduction

Sansiri Law ("we", "us", "our") is a legal practice registered and operating in Bangkok, Thailand. We take seriously our responsibility to handle personal information with care. This Privacy Policy explains what data we collect from visitors to this website and from individuals who engage our services, how that data is used, and what rights you have in relation to it.

This policy applies to all personal information collected through our website at https://sansiril.club and in connection with our legal services. We operate under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

2. Data We Collect

We collect personal information in the following ways:

2.1 Through this website

• Name and contact details submitted via our enquiry form (name, email address, telephone number)
• The content of messages submitted through the enquiry form
• Technical data including IP address, browser type, and pages visited (via analytics cookies, where consented)

2.2 During a legal engagement

• Identity documents (passport, national ID) as required for legal representation
• Financial information relevant to pension entitlement assessment
• Medical information where relevant to the pension matter (handled with heightened care as sensitive data under PDPA)
• Employment history and contribution records
• Correspondence with government pension offices

2.3 Legal basis for processing

• Consent — for marketing communications and analytics cookies (where applicable)
• Contract — for data processed in the course of delivering our legal services
• Legal obligation — where Thai law requires us to retain or disclose information
• Legitimate interest — for internal record-keeping and professional indemnity purposes

2.4 Retention periods

• Enquiry form submissions not followed by engagement: 12 months
• Client engagement records: 7 years from conclusion of the matter (professional obligation)
• Analytics data: as defined by each analytics provider's own data retention settings

3. How We Use Your Data

• To respond to enquiries submitted through our website
• To deliver the legal services you have engaged us to provide
• To communicate with government pension offices on your behalf, where instructed
• To prepare documentation relevant to your pension matter
• To maintain our internal case records and professional files
• To improve our website based on aggregate usage data (analytics, only with consent)
• To comply with any legal or regulatory obligation applicable to our practice

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

4. Data Protection Measures

• Client files are stored on access-controlled internal systems, not public cloud services without appropriate safeguards
• Physical documents containing personal data are held in locked storage accessible only to authorised staff
• Emails containing sensitive information are transmitted over encrypted connections where supported
• Access to client data is restricted to the members of staff working on each matter
• In the event of a personal data breach, we will notify affected individuals and, where required, the relevant Thai supervisory authority within the timelines prescribed by the PDPA

5. Cookies

Our website uses cookies. Essential cookies are required for the site to function and are placed without consent. Optional analytics and preference cookies are placed only with your agreement via our cookie consent banner.

For full details of the cookies we use, please see our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to personal data we hold about you:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data in certain circumstances
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, withdraw it at any time
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites — for example, Thai government pension authority pages. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will remove it promptly.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after a change constitutes acceptance of the updated policy.