Privacy Policy

1. Introduction

Mekhala Chambers ("we", "our", "the chambers") is committed to handling personal information with care and discretion. This Privacy Policy explains what personal data we collect, how we use it, the legal basis on which we rely, and the rights available to you under applicable law.

This policy applies to personal data collected through our website, through correspondence, and in the course of providing legal services. By submitting an inquiry or engaging our services, you acknowledge having read this policy. For questions, contact us at [email protected].

2. Data Controller

The data controller for personal information collected by this website and in connection with our services is:

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: Full name, date of birth where relevant to services.
• Contact data: Email address, telephone number, postal address.
• Matter data: Employment history, Social Security contribution records, official correspondence, and any other information necessary for the provision of legal services.
• Website usage data: IP address, browser type, pages visited, time spent on pages — collected via analytics cookies where consented to.
• Communications data: Records of correspondence, meeting notes, and instructions provided to the chambers.

We do not collect sensitive categories of personal data (such as health or financial information) beyond what is necessary for and directly relevant to a specific legal matter. Such data is collected only with your explicit consent.

4. How We Collect Data

• Contact forms submitted through this website
• Email and telephone correspondence
• Documents provided by you in connection with a matter
• Analytics cookies (where you have consented)
• In-person consultations and meetings

5. Legal Basis for Processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Contract performance: Processing necessary to provide the legal services you have engaged us for.
• Consent: For analytics cookies and any marketing communications (which you may withdraw at any time).
• Legitimate interests: For security monitoring, record-keeping, and responding to initial enquiries.
• Legal obligation: Where processing is required by law, court order, or professional regulation.

6. How We Use Personal Data

• Providing legal services you have requested
• Communicating about your matter and our services
• Maintaining accurate records of instructions and correspondence
• Responding to enquiries submitted through this website
• Improving website functionality and content (analytics only, with consent)
• Complying with professional regulatory requirements

We do not sell personal data to any third party. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

7. Data Retention

Matter files are retained for a minimum of 7 years following the close of an engagement, in line with professional retention requirements. Website enquiry data is retained for 12 months if no engagement follows. Analytics data (where consented) is retained per the cookie provider's default settings. You may request deletion of your data subject to applicable legal obligations.

8. Data Sharing

Personal data is not disclosed to third parties except in the following circumstances:

• To the Social Security Office, Labour Court, or other relevant authorities where required for your matter and with your knowledge
• To third-party service providers (e.g. secure document storage, analytics) under appropriate data processing agreements
• Where required by law, court order, or applicable professional rules

9. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access-controlled document storage, encrypted email communications where applicable, and regular review of our security practices. In the event of a data breach that poses a risk to individuals, we will notify the Personal Data Protection Committee of Thailand and affected individuals in accordance with the PDPA.

10. Cookies

This website uses cookies. Essential cookies are required for the site to function. Optional cookies (analytics, preferences) are used only with your consent. For detailed information on the cookies we use, please see our Cookie Policy.

11. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion, subject to legal retention requirements
• Right to data portability — request data in a commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — for consent-based processing, at any time
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

12. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

14. Policy Updates

This policy may be updated from time to time. Material changes will be indicated by a revised "Last Updated" date. Continued use of our website or services following an update constitutes acceptance of the revised policy.

15. Contact

For privacy-related enquiries: [email protected]
Mekhala Chambers, 88 Sathorn Road, Silom, Bang Rak, Bangkok 10500, Thailand.