Legal Information

Privacy Policy

Maha Advocates is committed to handling your personal information with care, transparency, and respect. This policy explains what data we collect, how we use it, and how you can exercise your rights under Thai law.

Last Updated: 15 May 2025

1. Introduction

Maha Advocates ("we", "us", "our") is the data controller for personal information collected through this website and in connection with our legal services. We are located at 126 Mittraphap Road, Mueang, Khon Kaen 40000, Thailand.

This Privacy Policy explains the types of personal data we collect, the purposes for which we process it, how we keep it secure, and the rights available to you under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable data protection legislation.

If you have questions about this policy or wish to exercise your rights, please contact us at [email protected] before proceeding further.

2. Data We Collect

We collect personal data only when it is reasonably necessary to provide our services or to respond to your enquiries.

Information You Provide Directly

  • Your full name and preferred form of address
  • Email address and telephone number
  • The contents of messages or enquiries submitted through our contact form
  • Documents or details you choose to share when seeking our legal assistance

Information Collected Automatically

  • Browser type, device type, and operating system
  • IP address and approximate geographic location
  • Pages visited, time spent on each page, and referral source
  • Cookie identifiers where consent has been granted (see Section 5)

Legal Basis for Processing

  • Contract performance — to respond to your enquiry or deliver the service you have requested
  • Legitimate interests — to understand how our website is used and to improve it
  • Consent — for optional analytics, marketing, or preference cookies
  • Legal obligation — to comply with applicable Thai laws and professional conduct requirements

Retention Periods

Contact enquiry data is retained for up to 3 years from the date of last interaction. Data relating to an active client engagement is retained for the period required by Thai legal and professional obligations, typically 10 years following matter closure. Website analytics data is retained for no longer than 26 months.

3. How We Use Your Data

  • To respond to your enquiries and provide the legal services you have requested
  • To keep you informed about the progress of your matter
  • To send administrative communications such as appointment reminders or document requests
  • To understand how visitors use this website so we can improve it
  • To comply with our professional duties and legal obligations under Thai law

Data Sharing

We do not sell or rent your personal data. We may share data with:

  • Courts, government agencies, or other parties where required to conduct your legal matter
  • Trusted technology service providers (hosting, analytics) who are contractually bound to handle data securely
  • Professional advisors acting in connection with the operation of our firm

Marketing Communications

We do not send unsolicited marketing emails. Any communications we send are directly related to your enquiry or matter. If you wish to stop receiving updates, you may contact us at any time.

4. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss.

  • All data transmitted to and from this website is encrypted via TLS/HTTPS
  • Access to personal data is limited to staff members who have a legitimate need to process it
  • Our systems are maintained and updated regularly to address known security vulnerabilities
  • Physical and digital access controls are in place at our office premises

In the event of a personal data breach that is likely to result in harm to individuals, we will notify the relevant supervisory authority and affected individuals within the timeframes required by the PDPA.

5. Cookies

This website uses cookies — small text files stored on your device — to support basic functionality, to understand site usage, and to remember your preferences where you have consented.

  • Essential cookies — necessary for the site to function correctly; always active
  • Analytics cookies — help us understand how pages are used; optional
  • Marketing cookies — used for relevance-based advertising; optional
  • Preference cookies — remember your settings across visits; optional

For full details and to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

  • Right to access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of your data where it is no longer necessary for the purpose it was collected
  • Right to restriction — to request that we limit how we use your data in certain circumstances
  • Right to data portability — to receive your data in a structured, commonly used format
  • Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent — to withdraw any consent you have given at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. There is no charge for most requests.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

This website may contain links to external websites for your convenience. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately. A link does not constitute an endorsement.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has submitted personal information to us, please contact us promptly and we will take steps to remove that data.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, practice, or the way we operate. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes your acknowledgement of the revised policy.

10. Contact for Privacy Matters

For questions, requests, or concerns relating to this Privacy Policy or our data practices, please contact us: