Privacy Policy

1. Introduction

Naga Pillar ("we", "us", "our") is committed to protecting and respecting the privacy of individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and safeguard personal data in connection with our legal advisory services and our website.

This policy applies to all individuals who use our website, submit inquiries through our contact form, or engage our services. Our data handling practices are aligned with Thailand's Personal Data Protection Act (PDPA), B.E. 2562 (2019).

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Information you provide directly: When you fill out our contact form or communicate with us, we collect your name, email address, phone number (if provided), and any details you include in your message.

Engagement-related data: If you engage our services, we may collect additional information necessary for the advisory work, such as business details, contract documents, and relevant correspondence.

Automatically collected data: When you visit our website, we may collect technical information including your IP address, browser type, pages visited, and time spent on the site through cookies and analytics tools.

3. How We Use Your Data

We use personal data for the following purposes:

Service delivery: To respond to your inquiries, provide legal advisory services, and communicate about your engagement.

Administrative purposes: To manage client records, process payments, and maintain accurate engagement files.

Website improvement: To analyse website usage patterns and improve our online experience using anonymised analytics data.

Legal compliance: To meet our obligations under applicable Thai laws and professional regulations.

We do not use your personal data for marketing purposes unless you have provided explicit consent.

4. Legal Basis for Processing

Under the PDPA, we process personal data based on the following legal grounds: your consent (where explicitly given), the necessity of performing a contract or providing requested services, our legitimate interests in operating and improving our practice, and compliance with legal obligations applicable to our business.

5. Data Sharing

We do not sell personal data to third parties. We may share personal data in limited circumstances: with government registries when required as part of a service engagement (such as business formation filings), with third-party service providers who assist with website hosting, email delivery, or analytics (under appropriate data processing agreements), and when required by law or legal process.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including encrypted document sharing and communication channels, secure server infrastructure with access controls, regular reviews of data handling procedures, and staff training on confidentiality and data protection obligations. While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected: inquiry data is retained for up to twelve months if no engagement follows, engagement-related records are retained for seven years following the completion of services (in line with professional and legal requirements), and website analytics data is retained in anonymised form.

8. Cookies

Our website uses cookies to improve functionality and understand site usage. For detailed information about the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request that we correct inaccurate or incomplete data.

Right to erasure: You may request that we delete your personal data, subject to legal retention requirements.

Right to data portability: You may request a copy of your data in a structured, machine-readable format.

Right to object: You may object to certain types of data processing.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external websites you visit.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website or services following any changes constitutes acceptance of the updated terms.

13. Contact and Supervisory Authority

Data Controller: Naga Pillar
323 Silom Road, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.