Privacy Policy

1. Who we are

mitsahax Advocates is the data controller for personal information collected through this website and in connection with our services. Our registered address is 142 Soi Phahonyothin 5, Samsen Nai, Phaya Thai, Bangkok 10400, Thailand. You can reach us by email at [email protected] or by telephone at +66 2 643 8521.

2. What personal data we collect

We collect personal information in the following ways:

Through the contact form on this website

• Full name (required)
• Email address (required)
• Telephone number (optional)
• Message content (optional)

When you contact us directly

• Contact details you provide by telephone or email
• Information about your matter as you describe it

During service delivery

• Information shared by participants during mediation sessions
• Information necessary to prepare written documents for your matter
• Financial information necessary to process payment

Through cookies and analytics

• Technical data about your visit (browser type, pages viewed, visit duration)
• See our Cookie Policy for detail

3. Legal basis for processing

We process personal data on the following legal bases under the PDPA:

• Consent — for optional cookies and marketing communications, where you have given explicit consent
• Contract — where processing is necessary to deliver a service you have engaged us to provide
• Legitimate interest — for responding to initial enquiries, improving our website, and maintaining records of completed matters
• Legal obligation — where we are required by Thai law to retain certain records

4. How we use personal data

• To respond to initial enquiries about our services
• To prepare written materials for mediation and settlement matters
• To communicate with participants throughout a matter
• To process payment for services provided
• To improve this website using aggregated, non-identifiable analytics data
• To comply with legal and regulatory obligations applicable to a law practice in Thailand

We do not use personal data for automated decision-making or profiling.

5. Data sharing

We do not sell, rent, or trade personal data. Information is shared only in the following circumstances:

• With participants in the same mediation matter, where sharing is necessary to deliver the service and all relevant parties are aware
• With service providers who assist us technically (for example, web hosting), under appropriate data processing agreements
• With Thai authorities where we are legally required to disclose information

Information disclosed during mediation sessions is treated as confidential and is not shared with parties outside the matter without the consent of all participants.

6. Data retention

• Enquiry records: retained for 12 months from the date of last contact, then deleted
• Matter files: retained for 7 years from the completion of the matter, in accordance with Thai law practice requirements
• Financial records: retained for 5 years in accordance with Thai accounting regulations
• Website analytics data: aggregated data retained for 24 months; individual session data not retained beyond 90 days

7. Data protection measures

• Data transmitted to this website is encrypted using TLS
• Files relating to client matters are stored on password-protected systems with access limited to the practitioners handling the matter
• Paper files are stored in locked cabinets at our Phaya Thai chambers
• In the event of a data breach that poses a risk to your rights, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours and will inform affected individuals promptly

8. Cookies

We use essential cookies to keep this site functioning, and optional analytics and preference cookies with your consent. You can manage your preferences at any time via our Cookie Policy page.

9. Your rights under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Access — to request a copy of the personal data we hold about you
• Rectification — to ask us to correct inaccurate or incomplete data
• Erasure — to request deletion of your data, subject to our legal obligations to retain certain records
• Portability — to receive your data in a structured, machine-readable format
• Objection — to object to processing based on legitimate interest
• Withdrawal of consent — to withdraw consent at any time where processing is based on consent
• Complaint — to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-party links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any external site you visit.

11. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided information to us, please contact us at [email protected] so we can delete it.

12. Changes to this policy

We may update this policy from time to time. The updated version will be published on this page with a revised date at the top. Continued use of this website following any update constitutes acceptance of the revised policy. We will notify clients with active matters of any material changes by email.

13. Contact

Data controller: mitsahax Advocates
142 Soi Phahonyothin 5, Samsen Nai, Phaya Thai, Bangkok 10400, Thailand
Email: [email protected]
Telephone: +66 2 643 8521

Supervisory authority: Office of the Personal Data Protection Committee (PDPC), Thailand — www.pdpc.or.th