Privacy Policy

1. Introduction

Juristel ("we", "us", "our"), a legal practice established in Bangkok, Thailand, is committed to handling personal data responsibly and transparently. This Privacy Policy describes how we collect, use, store, and protect personal information provided to us — whether through our website, through enquiries, or in the course of client engagements.

This Policy is in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA), and, where applicable to data subjects in the European Union, the General Data Protection Regulation (GDPR).

Questions about this Policy may be directed to: [email protected]

2. Data Controller

The data controller responsible for your personal data is Juristel, operating from 155 Silom Road, Suriyawong, Bang Rak, Bangkok 10500, Thailand. For data-related matters, please contact us at [email protected].

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, and business address.
• Enquiry and communication data: the content of messages or forms submitted through our website or by email.
• Business information: company name, role, and information relevant to the legal matter being discussed.
• Website usage data: technical information collected via cookies (see Section 7 below).

We do not collect sensitive personal data (such as health, political opinions, or biometric data) through our website.

4. How We Collect Personal Data

• Directly from you, through our website contact form or email correspondence.
• Through telephone enquiries.
• Automatically, through cookies and analytics tools when you visit our website.

5. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries and assessing whether Juristel can assist with your matter.
• Communicating with you in relation to an ongoing or proposed legal engagement.
• Maintaining records of client communications as required by professional obligations.
• Improving the performance and content of our website using anonymised analytics data.

We do not use your personal data for marketing purposes without your explicit consent. We do not sell personal data to third parties.

6. Legal Basis for Processing

• Consent: for cookie usage and any marketing communications you have opted into.
• Legitimate interests: for responding to enquiries and conducting initial conflict checks.
• Contractual necessity: for processing data necessary to fulfil an engagement.
• Legal obligation: for retaining records as required by Thai law and professional rules.

7. Cookies

Our website uses cookies to understand how visitors use the site and to support its functionality. Please see our Cookie Policy for full details. You may manage your cookie preferences at any time through our Cookie Policy page.

8. Data Sharing

Juristel does not share your personal data with third parties except in the following circumstances:

• With affiliated counsel in other jurisdictions, where relevant to a cross-border engagement and with your knowledge.
• With service providers who assist in operating our website (e.g., analytics services), under appropriate data processing agreements.
• Where required by Thai law or by an order of a competent authority.

9. Data Retention

Personal data collected through initial enquiries is retained for up to 12 months unless an engagement commences, in which case it is held for the duration of the engagement and for a minimum of 5 years thereafter, in accordance with Thai legal professional obligations.

Website analytics data is retained in anonymised form. Cookie consent records are retained for up to 12 months.

10. Data Protection Measures

• Access to client files and communication data is restricted to team members with a need to access it.
• Physical documents are stored securely within our Bangkok office.
• Digital communications and data are handled through professional-grade, secure systems.
• In the event of a data breach that poses a risk to individuals, we will notify affected data subjects and the relevant authority as required by the PDPA.

11. Your Rights

Under the PDPA and, where applicable, GDPR, you have the following rights:

• Right to access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate data.
• Right to erasure: to request deletion of your data, subject to our legal obligations to retain it.
• Right to data portability: to receive your data in a structured format where applicable.
• Right to object: to processing based on legitimate interests.
• Right to withdraw consent: at any time, where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

12. Third-Party Links

Our website may contain links to external sites. Juristel is not responsible for the privacy practices of those sites and encourages you to review their privacy policies independently.

13. Children's Privacy

Our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you become aware that a minor has provided data to us, please contact us so we can remove it.

14. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or in applicable law. The current version will always be available on this page, with the effective date noted at the top. We encourage you to review it periodically.

15. Contact

For privacy-related enquiries, including requests to exercise your rights, please contact: