Privacy Policy

Naga Counsel ("we", "us", "our") is a legal practice based at 142 Ladprao Road, Chatuchak, Bangkok 10900, Thailand. We provide pension-related legal support to individuals. This Privacy Policy explains how we collect, use, store, and protect personal data that we receive through our website at nagacouns.cyou and through the course of our client engagements.

We take the protection of personal data seriously. The nature of pension legal matters means that clients share sensitive financial and personal information with us, and we handle all such information with the care that trust requires. This policy sets out what we do with that information and what rights you have in relation to it.

If you have questions about this policy, please contact us at [email protected].

We collect the following categories of personal data:

• Contact information: Name, email address, telephone number, provided when you submit an enquiry form or contact us directly.
• Case-related documents and data: Employment records, pension fund statements, correspondence with funds or employers, and other documents you share with us in connection with a matter.
• Identity information: Passport or ID details, where required for legal submissions or verification purposes.
• Financial information: Fund balances, contribution records, pension entitlement amounts, as provided in documents you bring to consultations.
• Website usage data: Pages visited, browser type, IP address, collected via cookies and analytics tools (see Section 5).

The legal bases on which we process your data include your consent (for enquiry form submissions and cookie preferences), the performance of a contract (when you engage us for a service), and our legitimate interest in operating and improving our practice. Data collected in connection with a legal engagement is also processed as necessary to comply with our professional obligations under Thai law.

We retain client matter files for a period of seven years following the conclusion of an engagement, in line with professional practice standards. Website enquiry data not leading to an engagement is held for twelve months.

We use your personal data for the following purposes:

• Responding to enquiries and arranging consultations
• Providing pension legal services as agreed with you
• Preparing submissions, correspondence, and legal documents on your behalf
• Communicating with pension funds, the Social Security Office, and other relevant authorities as part of your matter
• Maintaining our case management records and professional obligations
• Improving our website and understanding how it is used (analytics data only, in anonymised form where possible)

We do not use your data for direct marketing unless you have specifically consented to receiving communications from us. We do not sell or rent personal data to third parties. Data is shared with third parties only where necessary to progress your matter (such as pension fund administrators or regulatory authorities) and only with your knowledge.

We take the following steps to protect the personal data we hold:

• Client files, both digital and physical, are stored securely with access restricted to the advisers working on your matter.
• Digital data is held on password-protected systems. Communications containing sensitive information are conducted using encrypted email where possible.
• Staff with access to client data are bound by confidentiality obligations under their employment terms.
• In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant authority promptly in accordance with the Personal Data Protection Act B.E. 2562 (PDPA).

Our website uses cookies to ensure it functions correctly and to understand how visitors use it. We use essential cookies (required for the site to work), analytics cookies (to understand page usage in anonymised form), and preference cookies (to remember your consent choices).

You can manage your cookie preferences at any time via our Cookie Policy page, which includes controls to accept or decline optional cookies.

Under the Personal Data Protection Act B.E. 2562 (Thailand PDPA), you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data.
• Right to erasure: You may ask us to delete your data, subject to our legal obligations to retain certain records.
• Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to object: You may object to processing where it is based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

Our website may contain links to external websites, including government bodies and fund administrators. We are not responsible for the privacy practices of those websites and recommend reviewing their privacy policies separately.

For any questions or requests relating to this Privacy Policy or your personal data, please contact: