Privacy Policy

Introduction

Lotus Barristers is committed to protecting the privacy and confidentiality of all individuals who use our legal services or visit our website. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand and international best practices.

As a legal practice, we hold ourselves to the highest standards of confidentiality. Attorney-client privilege protects communications related to legal representation, and we maintain additional safeguards to ensure all personal information is handled with appropriate care.

1. Data We Collect

Information You Provide

When you engage our services or contact us, we may collect the following personal data:

• •Name, contact information (email address, telephone number, mailing address)
• •Identification documentation (passport, national ID) as required for legal services
• •Financial information relevant to your legal matter (asset details, income documentation)
• •Information about your legal needs and circumstances
• •Correspondence and communications with our office

Automatically Collected Information

When you visit our website, we may automatically collect:

• •IP address and browser type
• •Pages visited and time spent on our website
• •Referring website or search terms used
• •Device information and operating system

2. How We Use Your Data

We use your personal data for the following purposes:

• •Legal Services: To provide will preparation, notarial services, tax representation, or other legal assistance you have requested
• •Client Communication: To respond to inquiries, schedule consultations, and provide updates on your legal matter
• •Document Preparation: To draft wills, powers of attorney, affidavits, objection letters, and other legal documents
• •Government Coordination: To submit documents to the Ministry of Foreign Affairs, Revenue Department, or other relevant authorities as required for your matter
• •Legal Compliance: To fulfill professional and regulatory obligations under Thai law
• •Record Keeping: To maintain files as required by professional standards and applicable law

Legal Basis for Processing

We process your personal data on the following legal bases: (1) Performance of contract—to deliver the legal services you have engaged us to provide; (2) Legal obligation—to comply with professional regulations and legal requirements; (3) Legitimate interest—to communicate with you regarding your inquiry or matter; (4) Consent—where you have provided explicit consent for specific processing activities.

3. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• •Active Client Files: Maintained for the duration of legal representation and five years following matter conclusion, in accordance with Thai Bar Association requirements
• •Closed Files: Archived securely for ten years from matter closure unless longer retention is required by law or professional standards
• •Inquiry Data: Contact information from initial inquiries that do not result in engagement is retained for one year
• •Website Data: Analytics and usage data is retained for two years

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• •Government Authorities: When required to submit documents or information to the Revenue Department, Ministry of Foreign Affairs, courts, or other official bodies as part of your legal matter
• •Third-Party Service Providers: Professional translators, notaries, couriers, or document authentication services who assist in delivering legal services. These providers are bound by confidentiality obligations.
• •Legal Counsel: Foreign or co-counsel when coordinating cross-border legal matters with your consent
• •Legal Requirements: If required by law, court order, or regulatory authority

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• •Physical Security: Client files stored in locked cabinets within secure office premises with restricted access
• •Digital Security: Encrypted electronic storage, password-protected systems, and secure backup procedures
• •Access Controls: Personal data accessible only to authorized staff who require it to perform their duties
• •Communication Security: Encrypted email available for sensitive communications upon request
• •Staff Training: Regular training on confidentiality obligations and data protection procedures

6. Cookies and Tracking

Our website uses cookies to improve your browsing experience. We use the following types of cookies:

• •Essential Cookies: Required for basic website functionality
• •Analytics Cookies: Help us understand how visitors use our website (optional, requires consent)
• •Preference Cookies: Remember your choices and settings (optional, requires consent)

You can manage your cookie preferences through our Cookie Policy page. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

7. Your Rights

Under the Personal Data Protection Act of Thailand, you have the following rights regarding your personal data:

• •Right to Access: Request copies of your personal data held by us
• •Right to Rectification: Request correction of inaccurate or incomplete personal data
• •Right to Erasure: Request deletion of your personal data in certain circumstances (subject to our legal and professional obligations to retain client files)
• •Right to Data Portability: Receive your personal data in a structured, commonly used format
• •Right to Object: Object to processing of your personal data for certain purposes
• •Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
• •Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at privacy@lotusbarristersad. We will respond to your request within thirty days. Note that certain rights may be limited by our professional obligations to maintain client files and attorney-client privilege.

8. International Data Transfers

In some cases, your personal data may be transferred outside of Thailand, such as when coordinating with foreign counsel or submitting documents to foreign authorities. When this occurs, we ensure appropriate safeguards are in place through contractual clauses, adequacy decisions, or other lawful transfer mechanisms. You will be informed of such transfers when they occur as part of your legal matter.

9. Children's Privacy

Our services are not directed to individuals under eighteen years of age. We do not knowingly collect personal data from minors without parental consent. If we become aware that we have collected data from a minor without proper consent, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes acceptance of the revised policy.