Privacy Policy

Introduction

darawaan is committed to protecting the privacy and security of personal information entrusted to us by clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable data protection requirements.

As a legal services provider, we handle sensitive information with particular care, maintaining confidentiality standards required by both professional regulations and data protection law. This policy applies to information collected through our website, during consultations, and throughout client engagements.

For questions about this policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when contacting us or engaging our services, including:

• Name, email address, phone number, and contact preferences
• Business name, position, and company information (if applicable)
• Details about your legal matter, circumstances, or inquiry
• Documents and information provided during consultations or engagements
• Payment information (processed through secure third-party payment providers)
• Communication history and correspondence with our firm

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address, browser type, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source that directed you to our site
• Cookie data and similar tracking technologies (see our Cookie Policy)

Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary for providing legal services you've requested
• Consent: Where you've provided explicit consent for specific processing activities
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal Obligation: To comply with Thai legal, regulatory, and professional requirements

How We Use Your Information

Service Delivery

• Responding to inquiries and providing initial consultations
• Conducting legal research and analysis for your matter
• Preparing documents, opinions, and legal advice
• Communicating with you about your engagement or inquiry
• Managing billing, payment processing, and accounting

Business Operations

• Maintaining client records and engagement files
• Conducting conflict checks before accepting new matters
• Quality assurance and professional development
• Legal compliance and regulatory reporting where required
• Protecting against fraud, unauthorized access, and security threats

Communications

• Sending service-related updates and engagement communications
• Providing legal updates or newsletters (with your consent)
• Responding to questions or requests for information

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We engage trusted third-party service providers who assist with business operations, including:

• Secure document storage and management systems
• Payment processing services
• Email and communication platforms
• Professional advisors (accounting, IT support)

These service providers are contractually required to protect your information and use it only for specified purposes.

Legal Requirements

We may disclose information when required by Thai law, regulation, court order, or governmental authority, including:

• Compliance with lawful requests from Thai courts or government agencies
• Reporting required by the Lawyers Council of Thailand
• Prevention or investigation of suspected illegal activities
• Protection of our legal rights or the rights of others

Professional Advisors

With your knowledge and where necessary for providing comprehensive service, we may share information with:

• External legal specialists or co-counsel
• International legal advisors for cross-border matters
• Expert witnesses or consultants engaged for your matter

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Secure, encrypted storage systems for client files and documents
• Access controls limiting information access to authorized personnel only
• Regular security audits and system updates
• Secure communication channels for sensitive information exchange
• Employee training on confidentiality and data protection requirements
• Incident response procedures for potential data breaches

While we take reasonable precautions, no system is completely secure. We cannot guarantee absolute security of information transmitted electronically and recommend using secure methods when sending sensitive information.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and maintain appropriate records.

Retention Periods

• Active Client Files: Throughout engagement and for 10 years after completion (Thai professional requirements)
• Inquiry Records: Maintained for 3 years for conflict checking purposes
• Financial Records: 7 years in accordance with Thai accounting requirements
• Marketing Consent: Until consent is withdrawn or contact becomes inactive

After retention periods expire, we securely delete or anonymize personal information unless continued retention is required by law or legitimate business purposes.

Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to Access: Request confirmation of what personal data we hold about you and obtain a copy
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing of your personal data for certain purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent was the legal basis
• Right to Lodge Complaint: File a complaint with the Personal Data Protection Committee if you believe your rights have been violated

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that certain information may be retained where required by law or professional obligations, even after a deletion request.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyze usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

International Data Transfers

Your personal information is primarily stored and processed in Thailand. For clients with cross-border matters, we may need to share information with legal advisors in other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Data transfer agreements with adequate protection provisions
• Engagement of advisors in jurisdictions with adequate data protection laws
• Your explicit consent for necessary international transfers

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately for removal.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending direct communication to active clients regarding significant changes
• Requesting renewed consent where required by law

Your continued use of our services after policy changes indicates acceptance of the updated terms.

Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact: