Privacy Policy

Last Updated: 12 May 2025  |  Effective Date: 12 May 2025

Benja Legal ("the Firm," "we," "us," or "our"), operating from 17 Sathorn Road, Sathorn, Bangkok 10120, Thailand, is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have regarding your information.

This policy applies to all individuals who contact us, use our website, or engage our legal services. It has been prepared in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

1. Data Controller

Benja Legal is the data controller for personal information processed in connection with our services and website. For data-related enquiries, contact us at [email protected] or at the address above.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number
• Case-related information: details about your pension matter, employment history, pension fund information, relevant documents you share with us
• Communication records: correspondence by email, phone, or letter
• Website usage data: IP address, browser type, pages visited (collected via cookies — see Section 6)

We collect data when you submit an enquiry form on our website, contact us directly, or provide information as part of an engagement. We do not collect sensitive personal data beyond what is relevant to your pension matter.

3. Legal Basis for Processing

• Contract performance: where processing is necessary to provide the legal service you have requested
• Consent: where you have given explicit agreement, such as when submitting a contact form
• Legitimate interests: where we have a reasonable professional interest, such as maintaining records of legal advice provided
• Legal obligation: where we are required to retain or disclose information by law

4. How We Use Your Data

• Responding to your enquiry and arranging consultations
• Providing and managing legal services on your behalf
• Corresponding with pension authorities or other institutions as required by your matter
• Maintaining records as required by professional obligations and Thai law
• Improving our website based on aggregated usage data

We do not sell personal data to third parties. We do not use personal data for unsolicited marketing.

5. Data Sharing

We may share your personal data only in the following circumstances:

• With pension funds or authorities: to advance your matter, with your explicit knowledge
• With professional advisers: such as co-counsel, where necessary and under confidentiality obligations
• Legal compliance: where required by a court order or applicable Thai law
• With service providers: such as secure document storage, under data processing agreements

6. Cookies

Our website uses cookies to ensure basic functionality and to understand how visitors use the site. Please refer to our Cookie Policy for full details. You can manage your cookie preferences at any time.

7. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected, and in accordance with our professional obligations:

• Enquiry data (no engagement commenced): 12 months from last contact
• Client matter files: 7 years from conclusion of the matter, as required by Thai legal professional standards
• Website usage data: 13 months (standard analytics retention)

8. Data Protection Measures

We take the security of personal data seriously. Our measures include:

• Encrypted storage for client documents and correspondence
• Access controls restricting data to staff with a need to use it
• Secure email practices for sensitive communications
• Regular review of data handling procedures

In the event of a personal data breach that is likely to affect your rights, we will notify you and the relevant authority in accordance with the PDPA's requirements.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of data we hold, where no legal obligation requires retention
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to processing based on legitimate interests
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) if you believe your data has been mishandled

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may occasionally link to external resources. We are not responsible for the privacy practices of those sites. We encourage you to review their policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have received data from a minor, please contact us promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

For questions about this policy or your personal data:

• Email: [email protected]
• Post: Benja Legal, 17 Sathorn Road, Sathorn, Bangkok 10120, Thailand