Privacy Policy

1. Introduction

Chedi Legal ("we", "us", "our") is committed to handling personal information responsibly. This Privacy Policy explains what data we collect, how we use it, and what rights you have in relation to it. It applies to information collected through this website and through our legal services.

For questions about this policy, contact us at: [email protected]

2. Data We Collect

We may collect the following categories of personal information:

• Full name and contact details (email address, telephone number)
• Postal address, if relevant to your matter
• Details of your pension situation as shared during enquiries or engagements
• Employment history and fund membership details relevant to your case
• Communications you send to us by email, telephone, or in person
• Technical data collected automatically via cookies (see Cookie Policy)

We collect this information when you: submit an enquiry through our website, contact us by phone or email, visit our office, or engage us to provide legal services.

3. How We Use Your Information

• Providing legal services: To carry out the pension-related legal work you have instructed us to handle.
• Communicating with you: To respond to enquiries, provide updates on your matter, and share relevant information.
• Legal compliance: To meet obligations under Thai law, including record-keeping requirements applicable to legal practices.
• Improving our service: To understand how our services are used and how we can improve them, using non-identifying aggregate data.

We do not use your personal information for unsolicited marketing communications.

4. Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process your personal data on the following bases:

• Contractual necessity: To perform the legal services you have engaged us to provide.
• Consent: For website cookies and non-essential data uses, where you have given consent.
• Legal obligation: Where we are required to retain or disclose data under applicable Thai law.
• Legitimate interests: For internal quality assurance and record-keeping, balanced against your rights.

5. Data Retention

Client files and associated personal data are retained for a period of seven years following the conclusion of a matter, in line with Thai legal practice standards. Enquiry data from website forms where no engagement follows is held for up to twelve months. Technical and cookie data is governed by the retention periods described in our Cookie Policy.

6. Data Sharing

We do not sell or rent personal data. We may share data in the following limited circumstances:

• With pension funds, the Social Security Office, or other authorities — only as necessary to handle your matter, and with your knowledge.
• With professional advisers (such as translation or notarial services) engaged specifically in support of your matter.
• Where we are required to do so by Thai law or court order.

7. Data Security

We maintain physical, administrative, and technical safeguards appropriate to the sensitivity of the information we hold. Client files are stored securely and access is restricted to the practitioners responsible for your matter. We review our security practices on a regular basis.

In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authority as required under the PDPA.

8. Cookies

This website uses cookies. For full information about the types of cookies used and how to manage your preferences, please see our Cookie Policy.

9. Your Rights Under Thai PDPA

As a data subject under the Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data where we have no continuing legal basis to retain it
• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Withdraw consent where consent is the basis for processing
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that we have received data from a person under 18 without appropriate parental consent, we will delete it promptly.

11. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies separately.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following a material change constitutes your acceptance of the updated policy.

13. Contact

Data controller: Chedi Legal, 53 Thanon Ratchadamnoen, Mueang, Nakhon Ratchasima 30000, Thailand.

Privacy enquiries: [email protected]

Telephone: +66 44 256 8173