Legal Documents
Privacy Policy
Last Updated: 4 February 2025 · Effective Date: 4 February 2025
1. Introduction
Garuda Firm ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our services. This Privacy Policy sets out how we collect, use, store, and protect personal data in the context of our civil and commercial legal services in Bangkok, Thailand.
This Policy applies to information collected through our website at garudafirmois.life, by email, by telephone, and in the course of providing legal services. By using our website or contacting us, you acknowledge the practices described here.
For questions regarding this Policy, contact us at: [email protected]
2. Data We Collect
Information You Provide Directly
- Full name, email address, and telephone number (submitted via our contact form or by email)
- Details of your legal matter as shared in enquiry messages
- Business name or company registration number (where applicable)
- Property or transaction details relevant to your matter
Information Collected Automatically
- IP address and general browser information
- Pages visited and time spent on site (via analytics cookies, where consented)
- Device type and operating system
Retention Periods
Enquiry data is retained for 12 months from initial contact. Client matter records are retained for seven years from the conclusion of the matter, consistent with professional legal practice requirements in Thailand. Analytics data is retained for up to 26 months.
3. How We Use Your Data
- Responding to enquiries and providing information about our services
- Conducting conflict-of-interest checks before accepting new instructions
- Providing legal services as instructed and communicating throughout the matter
- Meeting our professional obligations under Thai law and the Lawyers Council of Thailand
- Improving our website through aggregated, anonymised analytics
- Sending relevant updates to existing clients (where consent has been given or a legitimate interest applies)
We do not use your personal data for direct marketing without your prior consent, and we do not sell or share personal data with third parties for their own marketing purposes.
4. Legal Basis for Processing
- Contract: Processing necessary to respond to an enquiry or deliver agreed legal services
- Legitimate interests: Maintaining conflict-check records, improving service quality, and managing communications with enquirers
- Consent: Analytics cookies and marketing communications (where specifically obtained)
- Legal obligation: Compliance with professional obligations and applicable Thai law
5. Data Sharing
We do not sell or trade personal data. We may share data with:
- Government agencies: The Land Department, Department of Business Development, Thai Arbitration Institute, or other relevant authorities, where required for your matter
- Professional counterparts: Other legal practitioners or agents acting in connection with your matter, with your knowledge
- Analytics providers: Google Analytics (where analytics cookies are accepted), operating under standard data processing agreements
- IT service providers: Hosting and email service providers, under confidentiality obligations
6. Data Security
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include access controls limiting data to relevant staff, encrypted email communications for sensitive matters, and secure document management procedures. In the event of a data breach that poses risk to your rights and freedoms, we will notify you and any relevant authorities as required by law.
7. Cookies
Our website uses cookies to function properly and, where you consent, to help us understand how the site is being used. Essential cookies are always active. Analytics and preference cookies are only used with your consent, which you can manage through the cookie banner or our Cookie Policy page.
8. Your Rights
Under applicable Thai data protection law and, where relevant, the GDPR (for EU-based data subjects), you have the following rights:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data (subject to our legal retention obligations)
- Right to restriction: Request that we limit how we process your data in certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you consider that your rights have not been appropriately respected, you may raise a complaint with the Personal Data Protection Committee of Thailand or, if applicable, the relevant supervisory authority in your country of residence.
9. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.
10. Children's Privacy
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted information through our website, please contact us so we can take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website after any changes constitutes acceptance of the updated Policy.
12. Contact
Data Controller: Garuda Firm
62 Sukhumvit Soi 21, Klongtoey Nua, Wattana, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 874 5316