Privacy Policy
bodhicoud · Last Updated: 14 April 2025 · Effective: 14 April 2025
bodhicoud ("we", "us", "the practice") is a legal services practice registered in Bangkok, Thailand. This policy explains how we collect and handle personal information in connection with our website and our legal services.
We take privacy seriously, both because it is the law and because the nature of personal injury legal matters means that the people who contact us are often sharing sensitive information about their health, finances, or circumstances.
Questions about this policy may be directed to: [email protected]
1. Data We Collect
We collect only the personal information necessary to respond to enquiries and deliver the services described on this website. This includes:
- Contact information: name, email address, telephone number
- Situation description: details of the incident or legal matter shared voluntarily in an enquiry
- Documents: medical records, police reports, correspondence, and other materials provided to support a matter
- Technical data: IP address, browser type, and pages visited, collected automatically by our web hosting environment
- Cookie consent preferences, stored locally in your browser
We do not purchase mailing lists. We do not collect data from social media platforms. We do not receive information from third-party data brokers.
2. Legal Basis for Processing
Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process your personal data on the following bases:
- Contractual necessity: When you engage our services, processing your information is necessary to deliver those services
- Legitimate interests: Responding to initial enquiries, maintaining records of completed matters, and operating our website
- Legal obligation: Retaining professional records as required under Thai legal professional standards
- Consent: For any optional analytical cookies, where you have opted in
3. How We Use Your Information
- To respond to your enquiry and assess whether we can assist
- To deliver the legal service you have engaged us for
- To communicate with you about your matter
- To comply with our professional obligations as lawyers
- To improve the content and functionality of this website
We do not use your personal information for marketing. We do not send newsletters or promotional emails. We do not profile or segment our clients for commercial purposes.
4. Data Sharing
We share personal information only where necessary and only with:
- Courts, tribunals, or regulatory bodies, where required by law or by the conduct of your matter
- Opposing parties or their legal representatives, where required for the management of your matter
- Expert witnesses or medical reviewers engaged to support a matter, under confidentiality obligations
- Our web hosting provider, for the operation of this website under a data processing agreement
We do not sell personal data. We do not share personal data with advertising networks or analytics platforms beyond basic website traffic data.
5. Data Retention
- Enquiries that do not proceed to engagement: deleted after 12 months
- Completed matter files: retained for 7 years from closure, consistent with Thai professional practice standards
- Website technical data: retained for up to 12 months in server logs, then deleted
- Cookie preferences: stored locally in your browser; cleared when you clear your browser data
6. Data Security
We take reasonable steps to protect the personal information we hold:
- This website is served over HTTPS with TLS encryption
- Matter files are stored in access-controlled systems accessible only to assigned practitioners
- Physical documents are held in locked storage at our Sathorn office
- Email communications involving sensitive documents are conducted over encrypted channels where available
- In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware
7. Cookies
This website uses cookies to store your consent preferences. We do not use advertising cookies or tracking cookies by default. If you have accepted analytics cookies, basic website traffic data may be collected. For full details, see our Cookie Policy.
8. Your Rights Under Thai PDPA
Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data where we have no ongoing legal basis to retain it
- Right to restriction: Request that we limit the processing of your data in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting lawfulness of prior processing
- Right to lodge a complaint: With the Office of the Personal Data Protection Committee (PDPC) in Thailand
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. International Data Transfers
Where personal data is transferred outside Thailand (for example, in correspondence with a client who has returned to their home country), we take appropriate steps to ensure the transfer is protected. We do not transfer data to countries without adequate data protection standards without first considering the appropriate safeguards.
10. Third-Party Links
This website may contain links to external resources (such as court websites or government bodies). We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policies of any external site you visit.
11. Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal information from persons under 18. If a child's information is relevant to a matter (for example, as an injured party represented by a guardian), we handle that information with additional care and obtain appropriate authority from the legal guardian.
12. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Where changes are material, we will note them prominently. Continued use of this website after a revision constitutes acceptance of the updated policy.
13. Contact for Privacy Matters
bodhicoud — Data Controller
65 Sathorn Soi 8, Silom, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]
Telephone: +66 2 583 7194