Privacy Policy

1. Introduction

Boripan ("we", "us", "our") is a pension legal services practice based at 189 Rama IV Road, Pathum Wan, Bangkok 10330, Thailand. We are committed to handling your personal information with care, transparency, and full respect for your privacy.

This policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to all information collected through our website and in the course of providing our services.

If you have any questions, please contact us at [email protected].

2. Data We Collect

Information You Provide

When you contact us through our website or by phone, we may collect:

• Your name
• Your email address
• Your phone number (if provided)
• Any information you share in your message about your pension matter

Automatically Collected Data

When you visit our website, standard technical information may be collected automatically, including your IP address, browser type, pages visited, and time of access. This is handled through analytics cookies, which require your consent (see Section 6).

Legal Basis for Processing

We process your data on the following legal bases under applicable Thai personal data protection principles:

• Consent — for marketing communications and analytics cookies
• Contract performance — to provide the services you have engaged us for
• Legitimate interest — to respond to enquiries and improve our services
• Legal obligation — where required by Thai law

3. How We Use Your Data

We use the information you provide to:

• Respond to your enquiries and arrange meetings
• Deliver the legal support service you have requested
• Prepare and manage correspondence and submissions on your behalf
• Keep you informed about the progress of your matter
• Send service-related communications

We do not sell your personal data. We do not share it with third parties for marketing purposes. Where third-party services are used (such as website hosting or analytics tools), they are bound by appropriate data processing terms.

Retention

Client matter records are retained for seven years from the conclusion of an engagement, in accordance with professional obligations. Website enquiry data not leading to an engagement is held for six months, then deleted.

4. Data Protection

We take appropriate technical and organisational measures to protect your personal data:

• Secure storage systems with access restricted to authorised personnel
• Encrypted email communications where possible
• Physical document security at our Bangkok office
• Regular review of data handling practices

In the event of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable Thai law and our professional obligations.

5. Cookies

Our website uses cookies to function and, with your consent, to improve the experience. Essential cookies are always active. Analytics and preference cookies are optional and require your consent via the cookie banner.

For full details, please see our Cookie Policy.

6. Your Rights

Under applicable Thai personal data protection principles, and to the extent applicable, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate information
• Erasure — request deletion of your data where there is no legal basis for continued retention
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — receive your data in a structured, commonly used format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on your consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies before sharing any personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us so we can delete it.

9. Jurisdiction

This policy is governed by Thai law. Matters relating to personal data protection in Thailand are overseen by the Office of the Personal Data Protection Commission (PDPC). If you have a concern that we are unable to resolve, you may contact the PDPC.

10. Changes to This Policy

We may update this policy from time to time. The most current version will always be available on this page with the date of last update shown at the top. Significant changes will be communicated to active clients directly.

11. Contact

Data Controller: Boripan
189 Rama IV Road, Pathum Wan, Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 89 615 3927