Legal

Privacy Policy

Last updated: 12 May 2025

khwanjaa Legal ("we", "us", "our") is committed to handling the personal information of anyone who contacts us or uses our services with care, discretion, and in full compliance with applicable law. This policy explains what information we collect, why we collect it, how we use and protect it, and what your rights are in relation to it.

This policy applies to all personal data processed in connection with our services and our website at khwanjaa.pro. Our services — reconciliation mediation, cohabitation agreement drafting, and family estate pre-planning — involve sensitive personal matters, and we treat the information you share with us accordingly.

If you have questions about this policy, please contact us at [email protected].

1. Data Controller

The data controller for personal information processed under this policy is:

khwanjaa Legal
219 Sukhumvit Road, Khlong Toei, Khlong Toei, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 561 8734

2. Personal Data We Collect

We collect only the personal data necessary to provide our services and respond to enquiries. This includes:

Contact information: name, email address, telephone number, provided when you contact us via our website form, by email, or by telephone
Matter-related information: details about your family situation, financial arrangements, or estate matters that you choose to share with us during consultations or in correspondence
Technical data: IP address, browser type, pages visited, and session duration, collected automatically when you visit our website via cookies and server logs

We collect personal data through: the contact form on our website, direct email or telephone contact, and in-person consultations at our office. We do not purchase personal data from third parties or collect data from social media platforms.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

Consent: when you submit the contact form on our website or agree to our engagement terms at the start of a service
Contractual necessity: when processing is necessary to deliver the service you have engaged us for
Legitimate interests: for basic website analytics and security monitoring, where this does not override your privacy rights
Legal obligation: where we are required to process or retain data to comply with applicable Thai law

4. How We Use Your Personal Data

Personal data collected is used to:

Respond to enquiries and explain our services
Deliver the mediation, drafting, or planning service you have engaged us for
Prepare, share, and revise documents relevant to your matter
Communicate with you during and after an engagement
Maintain records required by our professional obligations
Improve the performance and security of our website

We do not use your personal data for marketing communications without your explicit consent. We do not sell, rent, or share your personal data with third parties for commercial purposes.

5. Data Sharing

Your personal data is not shared with third parties except in the following limited circumstances:

Within our team: matter-related information is shared among the khwanjaa Legal practitioners working on your case, all of whom are bound by confidentiality obligations
Service providers: we use a small number of trusted technical service providers (email hosting, encrypted document storage) who process data only on our instructions and under contractual data protection obligations
Legal requirement: where disclosure is required by Thai law or a binding order of a competent court

All third-party service providers we use are required to maintain appropriate security standards. We do not transfer personal data outside Thailand unless technically necessary (for example, cloud storage services), in which case we ensure adequate safeguards are in place.

6. Data Retention

We retain personal data for as long as is necessary for the purpose it was collected:

Website enquiry data: 24 months from last contact, unless a service engagement follows
Client matter files (including all communications and documents): 7 years from the close of an engagement, in accordance with professional obligations under Thai law
Website analytics data: 13 months on a rolling basis
Accounting and financial records: 5 years as required by Thai revenue law

After these periods, data is securely deleted or anonymised.

7. Data Protection Measures

We take the security of your personal information seriously. Our measures include:

Encrypted storage for all client documents and correspondence
Password-protected and access-controlled internal systems
Confidentiality agreements signed by all staff and practitioners
Secure email for all client communications
Regular review of data handling practices

In the event of a personal data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframe required by the PDPA.

8. Cookies

Our website uses cookies to support basic functionality and understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the site to function correctly.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you
Right to rectification: you may ask us to correct inaccurate or incomplete data
Right to erasure: you may request deletion of your data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations
Right to data portability: you may request your data in a structured, machine-readable format where technically feasible
Right to object: you may object to processing based on legitimate interests
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal
Right to lodge a complaint: you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your data has been handled unlawfully

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites. We recommend reading their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Any material changes will be communicated via the website. The date at the top of this page reflects when the policy was last revised. Continued use of our services after a change constitutes acceptance of the updated policy.

13. Contact

For any questions, requests, or concerns about this policy or how we handle your personal data, please write to:

khwanjaa Legal — Privacy
219 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand
Email: [email protected]