Privacy Policy

1. Who We Are

Devi Legal is the data controller for personal data collected through this website and in connection with our advisory services. Our registered address is 66 Chayangkun Road, Mueang, Ubon Ratchathani 34000, Thailand. For data-related enquiries, please write to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, telephone number — provided when you submit the contact form or contact us directly.
• Enquiry content: any information you provide in the message field of the contact form or during consultations.
• Pension and financial records: documents you share with us in the course of receiving advisory services. These are handled under strict confidentiality.
• Technical data: browser type, device information, and anonymised analytics data collected via cookies when you use this website.

Legal basis for processing: consent (for marketing, where applicable), performance of a contract (for service delivery), and legitimate interests (for responding to enquiries and improving our services).

We retain contact data for up to three years from the date of last contact. Client matter files are retained for a period of seven years in accordance with applicable record-keeping obligations.

3. How We Use Your Data

• To respond to your enquiry and provide the services you have requested.
• To communicate with you about your matter, including sending written summaries and progress updates.
• To comply with legal and professional obligations applicable to legal advisors in Thailand.
• To improve the functionality of this website through anonymised analytics data.

We do not use your personal data for unsolicited marketing and will not share it with third parties for marketing purposes.

4. Data Sharing

We share personal data only where necessary for the delivery of services:

• With pension authorities, government bodies, and relevant institutions where required by your matter and with your knowledge.
• With trusted service providers (e.g. secure document storage) who are bound by confidentiality obligations.
• Where required by law, court order, or regulatory authority.

5. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Client files are stored in a secured environment with access limited to those directly handling the matter. In the event of a data breach that is likely to affect your rights, we will notify you without undue delay.

6. Cookies

This website uses cookies for basic functionality and optional analytics purposes. We will not place non-essential cookies without your consent. For full details, please see our Cookie Policy.

7. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right of rectification: to request correction of inaccurate data.
• Right of erasure: to request deletion of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
• Right to lodge a complaint: with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, please contact [email protected]. We will respond within 30 days.

8. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of third parties and encourage you to read their privacy policies separately.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us promptly so we can take appropriate action.

10. Policy Updates

We may update this policy from time to time. Changes will be published on this page with an updated date. Continued use of our website or services after any change constitutes acceptance of the revised policy.

11. Contact

For all data protection enquiries, please contact: