Privacy Policy

1. Who we are

The data controller is sinsaply, a legal practice registered in Thailand, with its principal office at 162/3 Thanon Asoke-Din Daeng, Din Daeng, Din Daeng, Bangkok 10400. For data protection enquiries, please write to [email protected].

2. What personal data we collect

We collect personal data in the following circumstances:

• Enquiry form submissions: name, email address, telephone number (optional), and the content of any message submitted through the website contact form.
• Email correspondence: name and email address, and any personal information contained in the body of the message.
• Service delivery: identity documents, family information, asset details, and other information necessary to perform the legal services requested. The specific data collected depends on the service.
• Website analytics: anonymised or pseudonymised usage data collected via cookies, where you have consented. See our Cookie Policy for details.

3. Legal basis for processing

We process personal data on the following legal bases under the PDPA:

• Performance of a contract: processing necessary to provide the legal services you have requested.
• Legitimate interests: responding to enquiries, administering the practice, and maintaining records of completed matters — where these interests are not overridden by your rights.
• Consent: for non-essential cookies and any marketing communications. You may withdraw consent at any time.
• Legal obligation: where we are required to retain or disclose information under Thai law.

4. How we use your personal data

We use the personal data we collect to:

• respond to enquiries and arrange consultations;
• provide the legal services you have engaged us to carry out;
• produce and maintain the written documents and records associated with your matter;
• comply with our professional obligations and applicable Thai law;
• improve the website and its content, on an anonymised basis;
• communicate with you about your matter or, with your consent, about related services.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data sharing

We share personal data only in the following circumstances:

• Foreign counsel: for cross-border matters, we share relevant information with qualified legal counsel in the jurisdictions involved, under confidentiality obligations. We will tell you which jurisdictions are involved before sharing.
• Regulatory authorities: where required by Thai law or applicable professional conduct rules.
• Service providers: we use a small number of third-party providers for website hosting and analytics. These providers process data only on our instructions and under contractual data protection obligations.

We do not sell, rent, or trade personal data. We do not share data with advertising networks.

6. Data retention

We retain personal data for the following periods:

• Enquiry records where no engagement follows: 12 months from the date of enquiry.
• Matter records for completed engagements: 7 years from the date of completion, in accordance with professional practice requirements.
• Website analytics data: in anonymised or aggregated form, for up to 26 months.

After the applicable retention period, data is securely deleted or anonymised.

7. Data protection measures

We take the security of client information seriously. Our measures include:

• secure, encrypted storage of digital files;
• access controls limiting data access to team members who need it for the relevant matter;
• physical security measures at our office premises;
• confidentiality obligations binding all staff and contractors;
• prompt notification to affected individuals in the event of a personal data breach, as required by the PDPA.

8. Cookies

We use cookies on this website. Essential cookies are necessary for the site to function and cannot be declined. Analytics and preference cookies are only set with your consent. For full details, please read our Cookie Policy.

9. Your rights under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data, where no legal basis exists for continued retention;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

10. Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing personal data.

11. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that such data has been collected, we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised date. We encourage you to review it periodically.

13. Contact for data enquiries

sinsaply
162/3 Thanon Asoke-Din Daeng, Din Daeng
Bangkok 10400, Thailand
Email: [email protected]
Telephone: +66 2 851 6324