Privacy Policy

1. Introduction

Saiyai Law ("we", "us", "our") is committed to protecting the personal information of everyone who contacts us or uses our services. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it. It applies to all interactions with Saiyai Law, including through our website at saiyailaw.club and through direct communication by phone or email.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Personal Data We Collect

We collect only what is necessary for the purpose of providing our services. This includes:

• Identity data: your name, as provided in a form or by email.
• Contact data: email address and phone number.
• Enquiry data: details you share about your situation in a message or consultation.
• Usage data: pages visited, browser type, and approximate location via cookies and analytics tools (if consented to).

We do not collect sensitive personal data (such as health or financial information) unless you share it voluntarily as part of describing your legal matter, in which case it is treated with heightened care and strict confidentiality.

Legal basis for processing: We process your data based on (a) your consent where required, (b) the performance of a contract or pre-contractual steps at your request, or (c) our legitimate interest in responding to enquiries and improving our services.

Retention periods: Contact and enquiry data from initial enquiries is held for up to 12 months. Data relating to ongoing matters is held for the duration of the matter plus 5 years, in line with standard legal practice requirements.

3. How We Use Your Data

• Responding to your enquiry and scheduling consultations
• Delivering the legal services you have requested
• Maintaining records required for legal practice compliance
• Improving our website experience (with your consent for analytics cookies)
• Sending follow-up communications directly related to your matter

We do not use your data for marketing purposes or share it with advertisers. We do not sell your data.

4. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Where required by Thai law or by a court order
• To our website hosting and email service providers, who are contractually bound to protect your data
• To analytics providers (Google Analytics) only where you have consented to analytics cookies

5. Data Protection & Security

• Data is stored on secure, encrypted servers
• Access to client data is restricted to authorised practitioners only
• We conduct periodic reviews of our data handling practices
• In the event of a data breach affecting your rights, we will notify you within 72 hours where required by the PDPA

6. Cookies

We use cookies on our website to ensure basic functionality and, where you consent, to understand how the site is used. Essential cookies cannot be disabled. Optional analytics and preference cookies are used only with your explicit consent. For full details, please see our Cookie Policy.

7. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: request deletion of your data where there is no lawful reason to retain it
• Right to portability: receive your data in a structured, readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. You may also lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a minor, please contact us so we can remove it.

10. Policy Updates

This policy may be updated from time to time. When significant changes are made, we will update the "Last updated" date at the top of this page. Continued use of our services following any update constitutes acceptance of the revised policy.