Legal
Privacy Policy
Last updated: 15 May 2025 · Effective date: 15 May 2025
Sala Legal ("we", "our", "us") is committed to handling personal information with care and discretion. This policy explains what data we collect, how we use it, and the rights available to you. It applies to information collected through our website at salalegal.pro and through our legal engagements.
1. Who We Are
The data controller is:
- Sala Legal
- 129 Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand
- Email: [email protected]
- Phone: +66 2 256 7918
We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), which governs the collection, use, and disclosure of personal data in Thailand.
2. Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, phone number, provided when you submit an enquiry form or contact us directly.
- Matter-related information: details of an estate or legal situation shared during consultations or the course of an engagement. This is handled under legal professional privilege.
- Website usage data: IP address, browser type, pages visited, collected through cookies and analytics tools.
Legal basis for processing
We process your data on the basis of: your consent (for enquiry forms and marketing); performance of a contract (for active legal engagements); legitimate interest (for maintaining records and improving our service); and legal obligation (compliance with Thai law and professional regulations).
Retention periods
Enquiry data is retained for 12 months unless you engage our services. Client matter data is retained for 7 years following conclusion of the engagement, consistent with Thai legal professional requirements. Website analytics data is retained for 26 months.
3. How We Use Your Data
- Responding to your enquiry or providing legal services
- Communicating with you about your matter
- Sending written summaries and updates related to your engagement
- Complying with Thai Bar Council and other regulatory requirements
- Improving our website and understanding how it is used (analytics only)
We do not sell personal data. We do not use your information for unsolicited direct marketing without your consent. If you receive communications from us and no longer wish to, please email [email protected].
Third-party sharing
We may share information with: courts and government bodies as required for your matter; allied legal practitioners in other jurisdictions when relevant to a cross-border estate; and service providers who support our operations (e.g. secure document storage, analytics providers) under data processing agreements.
4. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted file storage for client documents
- Access controls limiting data to authorised staff only
- HTTPS encryption for all website communications
- Regular review of data handling procedures
In the event of a data breach that affects your rights, we will notify you and the relevant authority as required by the PDPA.
5. Cookies
Our website uses cookies for essential functionality, analytics, and optional marketing purposes. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.
6. Your Rights
Under the Thai PDPA, you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data, subject to legal retention obligations
- Data portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe we have handled your data improperly.
7. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
8. Children's Privacy
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with a revised date. For significant changes affecting how we handle client data, we will notify active clients directly.
10. Contact Us
For any privacy-related questions or requests:
Sala Legal129 Wireless Road, Lumphini, Pathum Wan
Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 256 7918