Privacy Policy

1. Introduction

Dharma Path ("we", "us", "our") is a legal advisory firm located at 191/5 Wireless Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand. We are committed to handling personal data with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable data protection standards.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data. If you have questions, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number (optional), and the content of your message.
• Client engagements: identification documents, business registration details, and correspondence required to provide legal advisory services.
• Website analytics: anonymised usage data such as pages visited, time on site, and browser type — only if you have consented to analytics cookies.
• Communications: emails, phone records, or other correspondence you initiate with us.

We do not collect sensitive personal data (such as health, financial, or biometric data) through our website. Client-specific sensitive data collected during a legal engagement is handled under a separate confidentiality agreement.

3. Legal Basis for Processing

We process personal data on the following legal grounds under the PDPA:

• Consent: for analytics cookies, marketing communications, and non-essential processing where you have given explicit consent.
• Contract performance: where processing is necessary to provide the legal services you have requested.
• Legitimate interests: for responding to enquiries, maintaining records, and improving our service — where those interests are not overridden by your rights.
• Legal obligation: where we are required by Thai law to retain or disclose certain data.

4. How We Use Your Data

• Responding to enquiries submitted through our contact form or by telephone or email.
• Providing, administering, and completing legal advisory engagements.
• Communicating with you about your matter, including progress updates and document delivery.
• Maintaining professional records as required by Thai legal and regulatory obligations.
• Improving the functionality and content of our website (analytics data only, with consent).

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

5. Data Retention

We retain personal data for the following periods:

• Enquiries that did not result in an engagement: up to 12 months from the date of last contact.
• Client engagement records: 7 years from the completion of the engagement, in accordance with Thai statutory requirements for legal document retention.
• Analytics data: retained in anonymised form for up to 26 months.

After the applicable retention period, data is securely deleted or anonymised.

6. Data Sharing

We may share personal data with the following third parties where necessary:

• Government authorities and registries: such as the Department of Business Development (DBD), the Department of Intellectual Property (DIP), and the Board of Investment (BOI), where required to complete filings on your behalf.
• IT service providers: who host and maintain our website infrastructure, under data processing agreements requiring equivalent protections.
• Analytics providers: such as Google Analytics, where you have consented to analytics cookies.

We do not transfer personal data outside Thailand or the European Economic Area without appropriate safeguards, except where required by the nature of your legal matter (e.g., ASEAN IP filings).

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls limiting internal access to authorised personnel, encrypted transmission for sensitive documents, and regular review of our security practices. In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority and, where required, affected individuals within legally required timeframes.

8. Cookies

Our website uses cookies. For a full explanation of the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right to access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data where there is no longer a lawful basis for processing.
• Right to restriction: to request that we limit processing in certain circumstances.
• Right to data portability: to receive data you have provided to us in a machine-readable format.
• Right to object: to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us promptly so we can take appropriate action.

12. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "Last Updated" date above. Continued use of our website or services following such changes constitutes acceptance of the updated policy.