Privacy Policy

1. Introduction

Phra Heritage ("we", "us", "our") is committed to the responsible handling of personal information. This Privacy Policy explains what personal data we collect from visitors to this website and from clients who engage our legal services, how that data is used, and the rights you hold in relation to it.

This Policy applies to personal data processed in connection with our website at phrahera.world and our inheritance and estate legal services delivered from our office at 78 Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand.

If you have any questions about this Policy or about how we handle your data, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact and identification information: name, email address, telephone number, provided through our website contact form or in the course of an engagement.
• Matter-related information: information about your family circumstances, assets, and wishes provided in the course of legal consultations. This data is protected by solicitor-client privilege in addition to this Policy.
• Technical data: IP address, browser type, pages visited, and time spent on pages — collected automatically when you visit our website.
• Cookie data: preferences and consent records stored locally in your browser. See our Cookie Policy for details.

Legal basis for processing: We process contact form data on the basis of your consent (submitting the form). We process matter-related data on the basis of contractual necessity (performance of legal services). We process technical and analytics data on the basis of our legitimate interest in understanding how our website is used.

Retention: Contact enquiries not resulting in an engagement are held for 12 months. Client matter files are retained for a minimum of 10 years following completion of the engagement, in accordance with Thai professional standards. Website analytics data is retained for 26 months.

3. How We Use Your Data

• To respond to enquiries submitted through our website contact form.
• To deliver legal services and prepare documents in accordance with your instructions.
• To maintain client files and comply with our professional record-keeping obligations.
• To send periodic review invitations to existing clients (you may withdraw consent at any time).
• To analyse website usage and improve the content and usability of our website.
• To comply with legal and regulatory obligations.

We do not sell, rent, or exchange personal data with third parties for marketing purposes.

4. Data Sharing

We share personal data only in the following circumstances:

• Co-counsel and overseas lawyers: For cross-border estate matters, we may share relevant information with legal counsel in other jurisdictions. This is done only with your knowledge and agreement.
• Service providers: We use third-party providers for website hosting and email services. These providers are bound by data processing agreements and may not use your data for their own purposes.
• Legal requirements: We may disclose data where required to do so by law or in response to a valid legal process.

5. Data Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, and unauthorised access. Our website is served over HTTPS. Access to client files is limited to solicitors directly responsible for the relevant matter. Physical document archives are secured with restricted access.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.

6. Cookies

Our website uses cookies to function correctly and to understand how it is used. We use essential cookies (necessary for the site to operate), analytics cookies (to understand user behaviour), and preference cookies (to remember your settings).

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, and where applicable under other data protection legislation, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data or complete incomplete data.
• Right to erasure: You may ask us to delete your personal data in certain circumstances.
• Right to data portability: You may request that we provide your data in a structured, commonly used format.
• Right to object: You may object to processing based on our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: You may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand or another competent supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites, including the websites of overseas co-counsel or professional bodies. These sites have their own privacy policies and we are not responsible for their content or practices. We recommend reviewing the privacy policy of any site you visit.

9. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of the page. Where changes are material, we will take reasonable steps to bring them to the attention of existing clients. Continued use of our website following a revision constitutes acceptance of the updated Policy.