Privacy Policy

We collect personal information in the following situations:

Contact enquiries: When you submit a message through our website contact form, we collect your name, email address, and any information you choose to include in your message. A telephone number is optional.

Service engagement: When you retain our legal services, we collect additional information relevant to your case — which may include your full name, identification details, employment history, pension contribution records, and correspondence with Thai pension authorities. This is collected directly from you or with your authorisation from third-party sources such as the Social Security Office.

Website usage: Our website may collect basic technical data such as your browser type, device, and approximate location through cookies and server logs. See Section 5 for more detail.

Legal basis: Processing of contact enquiry data is based on our legitimate interest in responding to potential clients. Processing of case-related data is necessary for the performance of a legal services contract with you, or to take pre-contractual steps at your request. Consent is obtained where required by Thai law.

Retention: Contact enquiry data is retained for 12 months if no engagement follows. Case files are retained for 7 years from case closure, in line with Thai professional and tax obligations.

We use the information collected to respond to your enquiries, provide and administer our legal services, communicate with you about your case, and comply with our legal and professional obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes. Information may be shared with pension authorities or other official bodies as required to carry out your instructions, or where legally required.

We do not send marketing emails unless you have specifically requested them. You can withdraw any such consent at any time by contacting us at [email protected].

Our website uses HTTPS encryption for all data transmitted between your browser and our servers. Physical case files are stored securely within our office premises with restricted access.

Access to client records is limited to the members of the Boriphat team who need them to carry out your case. We do not use shared or public systems for storing case-sensitive information.

In the event of a data breach that may affect your rights and interests, we will notify you and, where required, the relevant Thai authority without undue delay.

Our website uses cookies to support basic functionality (such as remembering your cookie consent preference) and, where enabled, to understand how the site is used.

Essential cookies are necessary for the site to function and cannot be declined. Optional analytics and preference cookies are only set with your consent. You can manage your preferences at any time on our Cookie Policy page.

Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and related regulations, you have the following rights in relation to your personal data held by us:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data, subject to our legal retention obligations.
• Portability: to receive your data in a structured, commonly used format where technically feasible.
• Objection: to object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Complaint: to lodge a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Data Controller: Boriphat

Address: 83 Thanon Mittraphap, Nai Mueang, Mueang, Khon Kaen 40000, Thailand

Privacy Email: [email protected]

Telephone: +66 43 327 106