Privacy Policy

1. Introduction

Niran Legal is committed to protecting the privacy and security of personal data entrusted to us by clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand and professional legal standards established by the Lawyers Council of Thailand.

As a legal services provider, we recognize the sensitive nature of information shared with us and maintain strict confidentiality protocols that exceed baseline data protection requirements. This policy should be read in conjunction with our attorney-client privilege obligations and professional conduct standards.

For questions regarding this policy or our data protection practices, please contact our privacy officer at privacy@niranlegad.

2. Personal Data We Collect

We collect and process the following categories of personal data:

Information You Provide Directly

• Contact Information: Name, email address, phone number, and postal address when you submit inquiries or engage our services
• Professional Information: Business name, role, industry sector when relevant to legal representation
• Legal Matter Details: Information about your legal circumstances, financial data, corporate documents, contracts, and other materials necessary for representation
• Correspondence: Communications you send us via email, phone, or postal mail
• Payment Information: Billing details and payment history for services rendered

Information Collected Automatically

• Website Usage Data: IP address, browser type, operating system, pages visited, time spent on pages, and referral sources
• Cookies: Small data files stored on your device to improve website functionality and user experience (see our Cookie Policy for details)
• Device Information: Technical specifications of devices used to access our website

Information from Third Parties

• Information obtained from courts, regulatory agencies, opposing counsel, or other parties in legal proceedings where you are involved
• Public records relevant to your legal matter
• Information from professional references or referral sources with your consent

3. How We Use Your Personal Data

We process personal data for the following purposes, each with a lawful basis under Thai data protection law:

Legal Representation (Contract Performance)

• Providing legal advice and representation in bankruptcy, agricultural licensing, and competition law matters
• Preparing legal documents, filings, and correspondence
• Communicating with courts, regulatory agencies, and opposing parties
• Managing case files and maintaining legal records

Client Communication (Legitimate Interest)

• Responding to inquiries about our services
• Providing case updates and status reports
• Sending appointment reminders and scheduling confirmations
• Sharing legal developments relevant to your matters

Business Operations (Legitimate Interest)

• Processing payments and maintaining financial records
• Conducting conflict of interest checks before accepting new clients
• Improving our website and services
• Analyzing service usage to enhance client experience

Legal Compliance (Legal Obligation)

• Complying with Thai Bar Association record-keeping requirements
• Responding to lawful requests from courts or regulatory authorities
• Maintaining records for tax and accounting purposes
• Fulfilling anti-money laundering and client identification obligations

4. Data Retention

We retain personal data for the following periods:

• Active Client Files: Throughout the duration of legal representation and for ten years following case closure, in accordance with Thai Bar Association professional standards
• Financial Records: Seven years from the end of the fiscal year in which services were provided, as required by Thai tax law
• Inquiry Records: Two years from initial contact if engagement does not proceed
• Website Analytics: 26 months from collection
• Cookie Data: As specified in our Cookie Policy, typically up to 12 months

Following these retention periods, personal data is securely destroyed unless continued retention is required for legal proceedings, regulatory compliance, or with your explicit consent.

5. Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Physical Security: Controlled office access, secure document storage, and visitor logging
• Electronic Security: Encrypted file storage, password-protected systems, regular software updates, and firewall protection
• Access Controls: Personal data accessible only to attorneys and staff directly involved in your matter
• Communication Security: Encrypted email options for sensitive communications
• Staff Training: Regular confidentiality and data protection training for all personnel
• Incident Response: Procedures for detecting, reporting, and responding to data breaches

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections appropriate for a legal services provider.

6. Data Sharing and Disclosure

We share personal data only in the following circumstances:

With Your Consent

• Sharing information with third parties you have authorized
• Disclosure for purposes you have explicitly approved

For Legal Representation

• Courts and regulatory agencies in connection with your legal matters
• Opposing counsel and other parties involved in proceedings
• Expert witnesses, translators, or consultants engaged for your case
• Co-counsel or referring attorneys when appropriate

Service Providers

• Document storage and management vendors
• Accounting and payment processing services
• IT support and website hosting providers
• Professional liability insurance carriers (when required)

All service providers are contractually bound to maintain confidentiality and use data only for specified purposes.

Legal Requirements

• When required by court order or subpoena
• To comply with applicable laws and regulations
• To prevent fraud or illegal activities
• To protect our legal rights and interests

We do not sell, rent, or trade personal data to third parties for marketing purposes.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and analyze usage patterns. We use the following types of cookies:

• Essential Cookies: Required for website operation and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our website

For detailed information about our cookie usage and how to manage cookie preferences, please review our Cookie Policy.

8. Your Data Protection Rights

Under the Personal Data Protection Act of Thailand, you have the following rights regarding your personal data:

• Right of Access: Request confirmation of whether we process your personal data and obtain copies of such data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of personal data when it is no longer necessary for the purposes collected, subject to legal retention requirements
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your personal data in a structured, commonly used format and transmit it to another controller
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent previously given for specific processing activities

Please note that certain rights may be limited by legal or professional obligations. For example, we cannot delete case files that must be retained under Thai Bar Association rules or for ongoing legal proceedings.

To exercise your rights, contact us at privacy@niranlegad. We will respond to your request within 30 days.

9. Children's Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect personal data from minors without parental or guardian consent. If you believe we have collected information from a minor, please contact us immediately for removal.

10. Third-Party Websites

Our website may contain links to external websites operated by courts, regulatory agencies, or other third parties. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. International Data Transfers

Personal data is primarily stored and processed in Thailand. If we transfer data outside Thailand (for example, when using cloud service providers with international servers), we ensure appropriate safeguards are in place through standard contractual clauses or other approved transfer mechanisms.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Material changes will be communicated via email to active clients or through a prominent notice on our website. Continued use of our services following policy updates constitutes acceptance of the revised terms.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

14. Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand or other relevant supervisory authority. However, we encourage you to contact us directly first so we may address your concerns.