Privacy Policy

Ramkhamhaeng Law ("we", "us", "the practice") is a legal practice situated at 1247 Ramkhamhaeng Road, Hua Mak, Bang Kapi, Bangkok 10240, Thailand. We provide pension defence and pension rights legal services to individuals in Thailand.

This Privacy Policy explains how we collect, use, store, and protect the personal data of individuals who use our website or engage our services. It applies to all personal data processed by Ramkhamhaeng Law in connection with our legal services and our website at ramkhamq.info.

We operate in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), which is the principal data protection legislation in Thailand. Where services are provided to individuals in the European Economic Area, the General Data Protection Regulation (GDPR) may also apply as applicable.

If you have questions about this policy or about how we handle your personal data, you may contact us at [email protected].

We collect personal data only to the extent necessary for the specific purpose for which it is collected. The categories of personal data we may collect include:

• Identity data: full name, date of birth, national identification number where relevant to a pension matter
• Contact data: postal address, telephone number, email address
• Employment and pension data: employment history, Social Security contribution records, pension authority correspondence and determinations
• Financial data: bank account details where required for the payment of fees
• Technical data: IP address, browser type, and pages visited, collected via cookies and analytics tools when you use our website
• Communications data: correspondence sent to or received from us by email, letter, or telephone

Legal basis for processing: We process personal data on the following bases under the PDPA: (a) consent, where you have provided it; (b) performance of a contract, where processing is necessary to deliver the legal service instructed; (c) legitimate interests, where we have a legitimate interest in processing that is not overridden by your interests or rights; and (d) legal obligation, where processing is required by applicable law.

Retention: Client matter files are retained for a period of seven years from the conclusion of the relevant matter, in accordance with standard legal practice requirements in Thailand. Website enquiry data not resulting in an instruction is retained for twelve months and then deleted.

Personal data collected by Ramkhamhaeng Law is used for the following purposes:

• To respond to initial enquiries and to assess your legal situation
• To deliver the legal service or services you have instructed
• To communicate with you about your matter and to provide progress updates
• To submit documents to or correspond with pension authorities or courts on your behalf
• To maintain our practice management records and to comply with our professional obligations
• To analyse and improve the performance of our website, using aggregated and anonymised technical data

We do not sell, rent, or otherwise disclose personal data to third parties for marketing purposes. We do not send marketing communications without your prior consent.

We may share personal data with third parties only in the following circumstances: (a) with pension authorities, courts, former employers, or other parties as instructed by you and necessary to carry out your legal matter; (b) with professional advisers such as barristers or specialist counsel engaged on your behalf; (c) with our technology and hosting providers, under data processing agreements; and (d) where required to do so by law or by a competent authority.

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encrypted transmission of data via HTTPS on our website
• Secure document storage with access restricted to authorised team members
• Password-protected systems and regular access reviews
• Professional confidentiality obligations applicable to all team members

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals within the timeframes required by law.

Our website uses cookies to support essential functionality and to help us understand how visitors use the site. Cookies are small text files stored on your device when you visit a website.

We use essential cookies that are necessary for the website to function, and optional analytics cookies that help us understand site usage patterns. You may manage your cookie preferences at any time through our Cookie Policy page.

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right to access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to object: to object to processing based on legitimate interests
• Right to data portability: to receive your data in a structured, machine-readable format where applicable
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Some rights are subject to conditions and exceptions under applicable law; where an exception applies, we will explain this in our response.

Our website may contain links to external websites operated by third parties, including government authority websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of any external site you visit.

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor without appropriate consent, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of our website following a policy update constitutes acceptance of the revised policy. For material changes, we will take reasonable steps to notify affected individuals.