Privacy Policy

1. Introduction

Bodhi Advocates ("we", "us", "our") is a legal practice registered in Bangkok, Thailand, operating from 36 Phaya Thai Road, Ratchathewi, Bangkok 10400. We take the privacy of our clients and website visitors seriously and are committed to handling personal data responsibly.

This policy explains what personal data we collect, how we use it, and the rights you have in relation to it. It applies to data collected through our website at bodhiadvo.blog and in the course of providing our legal services. If you have questions about anything in this policy, please write to us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Data You Provide Directly

• Name and contact details (email address, phone number) submitted via our enquiry form
• Pension-related documents and information you share with us as part of a service engagement
• Correspondence sent to us by email or post

2.2 Data Collected Automatically

• Website usage data via cookies and analytics tools (browser type, pages visited, visit duration)
• IP address and device information for security and performance purposes

2.3 Legal Basis for Processing

We process personal data on the following bases: performance of a contract (where data is necessary to provide the services you have requested), legitimate interests (for website analytics and security), and consent (for optional communications and cookies). Where we rely on consent, you may withdraw it at any time.

2.4 Retention Periods

Enquiry data not resulting in an engagement is retained for up to 12 months. Client matter files are retained for seven years following the conclusion of the engagement, in accordance with professional obligations under Thai law. Website analytics data is retained for up to 26 months.

3. How We Use Personal Data

• To respond to enquiries and provide the services you have requested
• To communicate with you about your matter, including updates and written summaries
• To fulfil our legal and professional obligations, including record-keeping requirements
• To improve our website and understand how visitors use it (analytics)
• To send occasional service-related communications where you have given consent

We do not sell personal data to third parties. We do not use personal data for unsolicited marketing without prior consent.

3.1 Third-Party Service Providers

We may share data with trusted service providers who support our operations (such as secure document storage and email infrastructure) under data processing agreements that require them to handle data only on our instructions and to appropriate security standards.

4. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting data access to authorised staff only
• Secure document storage for client matter files
• Regular review of security practices

In the event of a data breach that presents a risk to individuals, we will notify affected parties and, where required, the relevant authorities, in accordance with applicable law.

5. Cookies

Our website uses cookies to support basic functionality, understand usage patterns, and improve the visitor experience. You can manage your cookie preferences using the consent tool on our homepage or through your browser settings. For full details, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act B.E. 2562 (2019) (PDPA) and other applicable Thai law, you have the following rights in relation to personal data we hold about you:

• Right of access — to request confirmation of whether we hold personal data about you and a copy of that data
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of personal data in certain circumstances
• Right to data portability — to receive personal data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time
• Right to lodge a complaint — with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal data to them.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website or services following a change constitutes acceptance of the updated policy.