Privacy Policy

1. Introduction

Phueng Counsel ("we", "us", "our") is committed to handling personal information with care. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Policy applies to personal data collected through our website at phuengco.info and in the course of our legal service engagements. If you have questions about this Policy, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal data is:

Phueng Counsel
145/4 Ratchaphruek Road, Mueang Udon Thani, Udon Thani 41000, Thailand
Email: [email protected]
Phone: +66 63 471 9826

3. Personal Data We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, phone number, and any details you choose to include in a message.
• Service engagements: Full name, identification documents, asset information, family composition, and other information necessary to deliver the legal service requested.
• Website analytics: If analytics cookies are accepted, we may collect anonymised data about how our website is used, including pages visited and time spent on the site.

We collect only the personal data that is necessary for the purposes described in this Policy.

4. How We Use Personal Data

We use personal data for the following purposes:

• To respond to enquiries submitted through our contact form or by telephone or email.
• To deliver the legal services described in our engagement letters, including inheritance tax reviews, family trust establishment, and multi-generational estate planning.
• To communicate with you about the progress of your engagement, including updates, questions, and the delivery of documents.
• To comply with legal and professional obligations applicable to a registered legal practice in Thailand, including record-keeping requirements.
• To understand how our website is used, where analytics cookies have been accepted, in order to improve its content and usability.

5. Legal Basis for Processing

We rely on the following legal bases for processing personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA):

• Contract: Processing is necessary to perform the legal services you have engaged us to provide.
• Legitimate interests: Processing is necessary for the legitimate interests of operating a legal practice, including responding to enquiries and maintaining professional records.
• Consent: For optional cookies (analytics, marketing, preferences), processing is based on your consent, which you may withdraw at any time.
• Legal obligation: We may process data to comply with regulatory or professional obligations applicable to legal practitioners in Thailand.

6. Data Retention

We retain personal data for as long as is necessary for the purposes set out in this Policy:

• Enquiry data (contact form submissions) that does not lead to an engagement is retained for up to 12 months.
• Data relating to completed engagements is retained for a minimum of 7 years in accordance with Thai legal and professional standards applicable to legal practitioners.
• Website analytics data is retained for up to 24 months in anonymised form.

Where data is no longer required, it is deleted or anonymised securely.

7. Data Sharing

We do not sell personal data. We share personal data only in the following limited circumstances:

• External legal counsel: Where an engagement involves coordination with qualified legal practitioners in other jurisdictions, we share the relevant information with those practitioners — and only the information necessary for that purpose.
• Professional advisers: Including accountants and tax advisers, where instructed to do so as part of an engagement.
• Regulatory bodies: Where we are required to do so by law or by our professional regulatory obligations.

Third parties with whom we share data are required to handle it appropriately and are not permitted to use it for purposes beyond those for which it was shared.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or misuse. These include:

• Encrypted digital storage systems with access controls limited to authorised team members.
• Physical document storage in locked cabinets with restricted access.
• Regular review of access privileges on our information systems.
• Staff awareness of data protection obligations as part of our professional conduct standards.

In the event of a data breach that poses a risk to your rights or interests, we will notify you and the relevant authorities as required under the PDPA.

9. Cookies

Our website uses cookies. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights

Under Thailand's PDPA and applicable data protection standards, you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that inaccurate data be corrected.
• Right to erasure: You may request deletion of personal data we hold, subject to our legal and professional retention obligations.
• Right to data portability: You may request that we provide your data in a portable format where technically feasible.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time — including for optional cookies via our Cookie Policy page.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

12. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will arrange for its deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of the page. We encourage you to review this Policy periodically. Continued use of our website or services after any update constitutes acceptance of the revised Policy.

14. Contact

If you have questions or concerns about how we handle your personal data, please contact our data protection point of contact:

Phueng Counsel — Privacy
145/4 Ratchaphruek Road, Mueang Udon Thani, Udon Thani 41000, Thailand
Email: [email protected]

You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your data protection rights have not been respected.