Privacy Policy

1. Introduction

Aroon Legal ("we", "us", "our") is a legal practice based in Chiang Mai, Thailand. We take the privacy of our clients and website visitors seriously. This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to information collected through our website at aroonleg.biz and through direct correspondence with our practice. If you have questions about anything in this policy, please contact us at [email protected].

2. Data We Collect

Information you provide directly

When you complete the contact form on our website or correspond with us by email or telephone, we may collect:

• Full name
• Email address
• Telephone number (if provided)
• Description of your situation or enquiry
• Any documents or information you choose to share with us

Information collected automatically

When you visit our website, we may collect certain technical information automatically, including your IP address, browser type, pages visited, and time spent on the site. This information is used to understand how the site is used and to improve it. It is collected via cookies — see Section 5 for details.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Legitimate interest: To respond to enquiries and manage our professional relationships.
• Contract performance: Where you instruct us to act on your behalf, processing is necessary to deliver the service agreed.
• Consent: For any marketing communications (we do not currently send marketing emails).
• Legal obligation: Where we are required to retain or disclose data under Thai law.

4. How We Use Your Data

We use the personal data we collect to:

• Respond to enquiries and assess whether we are able to assist with your matter
• Provide the legal services you have instructed us to carry out
• Maintain records of our professional work as required by practice standards
• Improve the usability of our website (using anonymised analytics data)
• Comply with our legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Cookies

Our website uses cookies to understand how visitors interact with the site. Essential cookies are necessary for the site to function and cannot be disabled. Analytics and preference cookies are optional and are only placed if you accept them through the cookie consent notice. You can manage your preferences at any time on our Cookie Policy page.

6. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Where necessary to deliver the service — for example, submitting documentation to a pension authority on your behalf, with your knowledge and consent
• Where required by law or by a regulatory body
• With technical service providers who process data on our behalf (e.g., website hosting), subject to data processing agreements

7. Data Retention

Enquiry correspondence is retained for 12 months from the date of the enquiry if no engagement follows. Where we are instructed and complete a matter, the client file is retained for seven years following the conclusion of that matter, in accordance with standard legal practice retention obligations under Thai law. After this period, data is securely deleted or destroyed.

8. Data Security

We maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, or loss. Client documents and files are held in a restricted physical and digital environment. Access is limited to personnel with a direct operational need. We do not transmit sensitive client documents by unencrypted email.

In the event of a data breach that is likely to affect your rights, we will notify you without undue delay and take steps to contain and remediate the breach.

9. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand) and applicable principles, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your data where we no longer have a legal basis to retain it
• Right to restriction: To request that we limit how we process your data in certain circumstances
• Right to portability: To receive your data in a structured, machine-readable format
• Right to object: To object to processing based on legitimate interest
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Where your request is complex or numerous, we may extend this by a further 60 days and will inform you accordingly.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their respective privacy policies before providing any personal data.

11. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Where material changes are made, we will update the "Last Updated" date at the top of this page. Continued use of our website following such changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries, contact us at:

Aroon Legal
56/8 Nimmanhaemin Road Soi 11, Suthep, Chiang Mai 50200, Thailand
Email: [email protected]
Telephone: +66 88 359 7426