Privacy Policy

This Privacy Policy describes how Mongkol Law ("we", "us", "our") collects, uses, and protects personal data in connection with the legal services we provide and the operation of our website at mongkollis.sbs. It applies to all individuals who contact us, engage our services, or visit our website.

This policy is governed by the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"). Our registered office is at 33 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand.

1. Data We Collect

We may collect the following categories of personal data:

• Contact details: full name, email address, telephone number
• Communication content: messages sent through our contact form or by email
• Case-related information: details you provide about your pension matter, including any documents you share with us
• Technical data: IP address, browser type, pages visited, collected automatically when you use our website
• Cookie and usage data: as described in our Cookie Policy

We collect data when you fill in our contact form, send us an email, call our office, or engage us to handle your matter.

2. Legal Basis for Processing

We process personal data on one or more of the following bases:

• Consent — where you have clearly agreed to a specific use, such as receiving updates about your matter by email
• Contract performance — where processing is necessary to provide the service you have engaged us for
• Legitimate interests — such as maintaining records of our legal work and improving our services, where this does not override your rights
• Legal obligation — where Thai law or professional regulations require us to retain or disclose certain information

3. How We Use Your Data

• To respond to your enquiry and conduct an initial assessment
• To provide the legal service you have engaged, including correspondence on your behalf
• To maintain accurate records of our professional work, as required under Thai bar association rules
• To improve our website and services using aggregated, anonymised analytics
• To contact you about your matter or about developments relevant to your case

We do not use your personal data for direct marketing without explicit consent. We do not sell personal data to third parties.

4. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Where required to conduct your legal matter — for example, submitting documents to the Social Security Office or Government Pension Fund
• Where required by Thai law, a court order, or a competent authority
• With professional advisers (such as barristers or specialist consultants) where this is necessary and agreed with you
• With our technical service providers (website hosting, email), who are bound by confidentiality obligations and process data only on our instruction

5. Data Retention

We retain personal data for as long as is required to fulfil the purposes described in this policy, and for any additional period required by Thai professional conduct rules or applicable law. In general:

• Case files are retained for at least seven years following the close of a matter
• Website enquiry data not converted into a matter is deleted after twelve months
• Cookie and analytics data is retained for periods set out in our Cookie Policy

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted storage for client files and correspondence
• Access controls limiting file access to those working on the relevant matter
• Secure email communication for sensitive documents
• Regular review of our data handling procedures

In the event of a data breach that creates a material risk to your rights, we will notify you and the relevant supervisory authority in accordance with the PDPA requirements.

7. Cookies

Our website uses cookies to support its basic functionality and to understand how visitors use it. A full explanation of the cookies we use and how to manage them is set out in our Cookie Policy.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured format in certain cases
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal data.

10. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The most current version is always available on our website, dated at the top of this page. Where changes are material, we will notify active clients by email.

12. Contact

For any questions about this policy or how we handle your personal data, please contact: