Privacy Policy

When you interact with the Firm through our website or by contacting us directly, we may collect the following categories of personal information:

• Identity information — your full name and, where relevant, the name of your organization or business entity.
• Contact details — email address, telephone number, and postal address if provided.
• Inquiry content — the substance of any message you submit through our contact form, including descriptions of your legal matter or questions.
• Technical data — IP address, browser type, referring URL, and pages visited, collected automatically through standard web server logs and analytics tools.
• Cookie data — preferences and session identifiers stored in accordance with your consent choices. See Section 6 for further detail.

We do not seek to collect sensitive personal data (such as financial account numbers, health information, or national identification numbers) through our website. If your legal matter requires the exchange of such information, that process will be handled through secure, separately agreed channels.

Personal information collected through this website is used for the following purposes:

• Responding to inquiries and scheduling consultations.
• Assessing and preparing for a prospective client engagement.
• Sending service-related communications where you have requested them or where we have a legitimate interest in doing so.
• Improving the functionality and content of our website based on aggregated usage patterns.
• Complying with legal and professional obligations applicable to legal service providers in Thailand.

We do not use personal information collected through this website for automated decision-making or profiling that would have legal or significant effects on you.

Under Thailand's Personal Data Protection Act B.E. 2562, we process your personal data on the following bases depending on the nature of the interaction:

• Consent — where you have actively submitted a contact form or agreed to the use of optional cookies.
• Legitimate interests — for website analytics and security monitoring, where our interest in maintaining a functional and secure website is proportionate and does not override your privacy interests.
• Performance of a contract or pre-contractual steps — where your inquiry relates to an intended engagement with the Firm.
• Legal obligation — where applicable professional conduct rules or Thai law require us to retain or process certain information.

Haldane does not sell, rent, or trade personal information. We may share data in the following limited circumstances:

• Service providers — third-party vendors who assist with website hosting, analytics, and email delivery, each bound by data processing agreements and restricted from using your data for their own purposes.
• Professional advisors — where required for the provision of legal services (for example, co-counsel, translation services, or court filing agents in Thailand).
• Legal and regulatory authorities — where required or permitted by Thai law, court order, or applicable professional regulations.
• Business continuity — in the event of a firm merger, acquisition, or restructuring, personal data may be transferred subject to the same protections described in this policy.

Any third party receiving personal information from us is required to handle it in a manner consistent with applicable law and this policy.

We take reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or loss. These measures include:

• Encrypted transmission of data between your browser and our servers using TLS protocols.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular review of our data handling practices and third-party vendor arrangements.
• Procedures for identifying and responding to data breaches in line with PDPA notification requirements.

No method of electronic transmission or storage is entirely without risk. While we apply diligent measures, we cannot provide an absolute assurance of security for any information transmitted over the internet.

Our website uses cookies — small text files stored in your browser — to support core functionality and, with your consent, to gather anonymized usage data. Cookie categories include:

• Essential cookies — required for the website to operate correctly. These cannot be disabled.
• Analytics cookies — help us understand how visitors navigate the site, enabling us to improve content and structure. These are only active if you have provided consent.
• Preference cookies — retain choices such as your consent preferences between visits.
• Marketing cookies — used for tracking interactions with advertising platforms. These are only active with your explicit consent.

You may review and update your cookie preferences at any time on our Cookie Policy page. Withdrawing consent for optional cookies will not affect the lawfulness of processing carried out prior to withdrawal.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy or to comply with legal, regulatory, or professional obligations:

• Inquiry data — contact form submissions are retained for up to 24 months, after which they are securely deleted unless an active engagement has commenced.
• Client engagement records — retained for a minimum of seven years in accordance with Thai professional conduct obligations for legal service providers.
• Technical and analytics data — aggregated or anonymized after 26 months.
• Cookie preference records — retained for 12 months, after which consent will be re-requested.

Under the Thailand Personal Data Protection Act B.E. 2562, you hold the following rights in relation to your personal data:

• Right to access — you may request confirmation of whether we hold personal data about you and, if so, obtain a copy of it.
• Right to rectification — you may request correction of inaccurate or incomplete information.
• Right to erasure — in certain circumstances, you may request deletion of your personal data.
• Right to restriction of processing — you may ask us to limit how we use your data while a complaint or correction request is being resolved.
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.
• Right to object — where processing is based on legitimate interests, you may object to that processing.
• Right to withdraw consent — you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — you may submit a complaint to the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, please contact us at privacy@{{DOMAIN_NAME}}. We aim to respond to all requests within 30 days. Complex requests may require an extension, and we will inform you of any delay.

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from persons under the age of 18. If we become aware that such information has been submitted to us, we will take reasonable steps to delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@{{DOMAIN_NAME}}.

This website may contain links to external websites or resources not operated by Haldane. These links are provided for reference only. We have no control over the content or privacy practices of third-party sites and are not responsible for them. We encourage you to review the privacy notices of any external site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this document. We recommend reviewing this page periodically. Continued use of our website following the publication of an updated policy constitutes acknowledgment of the revised terms.

For privacy-related inquiries, requests to exercise your rights, or concerns about how your data is handled, please contact our data protection team: