Privacy Policy

1. Introduction

Lanna Lex ("we," "us," or "our") operates from 437 Nimmanhaemin Road, Suthep, Mueang, Chiang Mai 50200, Thailand. This policy explains how we collect, use, and protect personal information provided to us through this website and in the course of our legal services. We handle personal data with care, in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

If you have questions about this policy or about how your information is handled, please contact us at [email protected].

2. Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following:

• Name and contact information (email address, telephone number)
• Business name or employer information where relevant to the enquiry
• Employment-related information shared when seeking legal advice (for example, contract details or information about a termination situation)
• Technical data from website access: IP address, browser type, pages visited, and duration of visit (collected via analytics tools)
• Cookie preferences saved in your browser's local storage

We collect this information when you submit an enquiry form, contact us by telephone or email, or visit our website. We do not collect sensitive categories of personal data (such as health data or financial account details) unless you voluntarily include them in a communication to us.

3. How We Use Your Information

We use personal information for the following purposes:

• To respond to enquiries and to provide legal advisory services
• To maintain records of engagements as required by professional obligations
• To improve the quality and relevance of our website based on aggregate usage data
• To comply with legal or regulatory requirements applicable to legal practitioners in Thailand

We do not use personal information for marketing communications without your explicit consent, and we do not sell personal data to third parties.

Legal basis for processing: For enquiries and service delivery, our legal basis is the performance of a contract or pre-contractual steps. For website analytics, our legal basis is legitimate interest in understanding how the site is used. Where required, we rely on your consent.

4. How Long We Retain Your Data

• Enquiry and correspondence records: retained for a minimum of three years following the last communication, in accordance with the applicable limitation periods under Thai civil law
• Client engagement files where legal services were provided: retained for a minimum of five years
• Website analytics data: retained in aggregate, anonymised form; IP-level data is not retained beyond 14 months
• Cookie preference records: stored in your browser's local storage and remain there until cleared by you

5. How We Protect Your Information

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted communication channels for email and file transfer where possible
• Access to personal data limited to staff directly involved in the relevant matter
• Physical and digital access controls on client files
• Regular review of data handling practices

In the event of a data breach that is likely to affect your rights, we will notify you without undue delay and in accordance with PDPA obligations.

6. Cookies

Our website uses cookies to support basic site functionality and to understand how visitors use the site. We use:

• Essential cookies — required for the site to function; these cannot be disabled
• Analytics cookies — used to understand visit patterns; optional
• Preference cookies — remember your cookie settings; optional

You can view and manage your cookie preferences at any time by visiting our Cookie Policy page.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right of access — to request confirmation of whether we hold your personal data and to receive a copy
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to our legal retention obligations
• Right to restrict processing — to request that processing be limited in certain circumstances
• Right to data portability — to request your data in a structured, commonly used format where technically feasible
• Right to object — to object to processing where we rely on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

8. Third-Party Links

Our website may include links to external resources (such as official Thai government portals or the Lawyers Council of Thailand). We are not responsible for the privacy practices of those sites and recommend reviewing their respective privacy policies before providing any personal information.

9. Minors

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from persons under the age of 18. If you believe that a minor has submitted information to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. Material changes will be noted by updating the "Last Updated" date at the top of this page. Continued use of our website following a change constitutes acceptance of the updated policy.

11. Contact for Data Matters

For questions or requests relating to your personal data, please contact us:

• Email: [email protected]
• Post: Lanna Lex, 437 Nimmanhaemin Road, Suthep, Mueang, Chiang Mai 50200, Thailand
• Telephone: +66 53 274 6183