Legal
Privacy Policy
Last Updated:
This policy explains how Naga Advocates collects, uses, and safeguards your personal information. We handle data with care and only for the purposes described here. If you have questions, please write to us at [email protected].
1. Who We Are
Naga Advocates is a legal advocacy firm based in Bangkok, Thailand, providing assistance with pension matters. Our registered address is 207 Ratchaprarop Road, Ratchathewi, Bangkok 10400. For data-related inquiries, please contact us at [email protected].
We act as the data controller for personal information provided to us through this website or in the course of our services.
2. Information We Collect
We collect only the information that is reasonably necessary to respond to your enquiries and provide our services. This may include:
- Contact details: your name, email address, and telephone number, when you submit the contact form or communicate with us directly.
- Correspondence: the content of messages you send us, including details of your pension matter.
- Technical data: your IP address, browser type, and pages visited, collected automatically through standard server logs and analytics cookies (where consented).
- Service-related documents: pension statements, decisions, or correspondence you share with us in connection with our work on your behalf.
We do not purchase or obtain personal data from third-party data brokers.
3. Legal Basis for Processing
We process personal data under the following lawful bases in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand:
Contractual necessity
Processing required to carry out the service you have requested from us.
Legitimate interests
Responding to enquiries, maintaining records, and operating our practice in an orderly manner.
Consent
For optional analytics or marketing cookies, where you have given your agreement through the cookie preference tool.
Legal obligation
Where we are required to retain or disclose data by applicable Thai law or regulatory authority.
4. How We Use Your Information
The personal information you provide is used for the following purposes:
- Responding to your initial enquiry and arranging a consultation.
- Delivering the pension advocacy or review service you have engaged us for.
- Communicating with you about the progress of your matter.
- Maintaining accurate records for the duration of our professional engagement.
- Complying with any lawful obligation placed on us as a legal services practice.
- Improving our website using anonymised analytics data, where you have consented.
We do not sell, rent, or trade your personal information. We do not use your data for unsolicited commercial marketing.
5. Data Sharing
We share personal data only where necessary and always with appropriate care:
- Service providers: third parties who assist us in operating our website or practice (such as email hosting or secure document storage), bound by confidentiality obligations.
- Regulatory bodies: pension authorities, courts, or government agencies as required in the course of your matter or by law.
- Professional advisers: only where you have specifically requested or consented to our doing so.
We do not transfer personal data outside Thailand except where required to conduct your matter and only with appropriate safeguards in place.
6. Data Retention
We keep personal data for as long as is necessary for the purposes described above:
| Data Type | Retention Period |
|---|---|
| Contact enquiry records | 2 years from last contact |
| Active client files | 7 years from matter closure |
| Financial and billing records | 7 years (legal requirement) |
| Analytics and technical logs | 26 months (anonymised) |
7. Data Protection Measures
We take the security of your information seriously. Our measures include:
- Encryption of data in transit using TLS/HTTPS protocols.
- Restricted access to client files — available only to staff directly working on your matter.
- Secure storage of physical documents under lock and key at our Bangkok office.
- Regular review of our data handling practices and service-provider agreements.
- In the event of a data breach that may affect your rights, we will notify you and the relevant authority within the timeframes required by law.
8. Cookies
Our website uses cookies to function properly and, where you consent, to help us understand how visitors use the site. Cookies are small text files stored on your device.
We use essential cookies (always active) and optional analytics, marketing, and preference cookies (enabled only with your agreement). You can adjust your cookie preferences at any time on our Cookie Policy page.
9. Your Rights
Under the PDPA and applicable data protection principles, you have the following rights in relation to your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may ask us to correct any inaccurate or incomplete information.
Right to Erasure
You may ask us to delete your data where there is no longer a lawful basis to keep it.
Right to Object
You may object to processing based on legitimate interests.
Right to Portability
You may request your data in a structured, machine-readable format where technically feasible.
Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. If you feel your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
10. Third-Party Links
Our website may occasionally contain links to external resources. We are not responsible for the privacy practices of other websites. We encourage you to read the privacy policy of any site you visit.
11. Children's Privacy
Our services are intended for adults (18 years and older). We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with information, please contact us so we may remove it.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.
Questions About This Policy
If you have any questions about how we handle your personal data, or if you would like to exercise any of your rights, please reach out to us. We are happy to assist.