Legal
Privacy Policy
Last Updated: 12 May 2026 | Effective Date: 12 May 2026
Lotus Lanna ("we", "us", "our") is committed to handling personal information with care, transparency, and respect. This policy explains what data we collect, why we collect it, how we use it, and what rights you hold. It applies to all interactions with this website and with our legal services.
Data controller: Lotus Lanna, 38 Charoen Prathet Road, Mueang, Chiang Mai 50100, Thailand. Email: [email protected]
1. What Personal Data We Collect
We may collect the following categories of personal data:
- Identity data: name, surname
- Contact data: email address, telephone number, postal address
- Enquiry data: content of messages submitted via the contact form
- Technical data: IP address, browser type, pages visited, time spent on pages (via analytics cookies, if consented)
- Cookie preferences: consent choices stored in your browser's local storage
We do not collect sensitive personal data (such as health information, financial account details, or national identification numbers) through this website.
2. How We Collect Data
- Directly from you, when you complete the contact form or email us
- Automatically, via cookies and similar technologies (subject to your consent)
- During the course of providing legal services, as needed to conduct your matter
3. Legal Basis for Processing
We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable regulations:
- Consent: for optional cookies and marketing communications
- Contract performance: to provide legal services you have engaged us for
- Legitimate interests: to respond to enquiries, improve the website, and maintain records
- Legal obligation: to comply with legal and regulatory requirements applicable to legal practitioners in Thailand
4. How We Use Personal Data
- To respond to enquiries submitted via the contact form
- To provide and manage the legal services you have requested
- To send relevant updates about your matter
- To improve the website and understand how it is used (analytics, with consent only)
- To comply with professional and legal obligations applicable to law practitioners
We do not sell personal data to third parties. We do not send unsolicited marketing without prior consent.
5. Data Sharing
We share personal data only in the following circumstances:
- Court and regulatory bodies: where required to file documents or comply with official requests as part of legal proceedings
- Professional advisors: where we engage barristers, translators, or other professionals in connection with your matter, under confidentiality obligations
- Analytics providers: aggregated, anonymised data may be processed by analytics services (subject to your cookie consent)
All third parties we work with are required to handle data in accordance with applicable law and good practice.
6. Data Retention
- Enquiry data: retained for up to 12 months from the date of enquiry, unless you engage us for a matter
- Client matter data: retained for a minimum of 7 years following the close of the matter, in line with professional obligations
- Analytics data: retained in anonymised form for up to 26 months
- Cookie consent records: stored in your browser until cleared
7. Cookies
We use cookies to operate the website and, with your consent, to analyse usage. Full details are provided in our Cookie Policy. You can manage your preferences at any time via the cookie settings on this website.
8. Data Protection Measures
We take reasonable steps to protect personal data from loss, misuse, and unauthorised access, including:
- Secure HTTPS transmission for all website data
- Access controls limiting data to authorised personnel only
- Regular review of data handling practices
- Confidentiality obligations for all staff and engaged professionals
In the event of a personal data breach that poses risk to data subjects, we will notify affected individuals and the relevant supervisory authority in accordance with the PDPA.
9. Your Rights
Under Thailand's PDPA and, where applicable, other data protection laws, you have the following rights:
- Right of access: to request a copy of personal data we hold about you
- Right to rectification: to request correction of inaccurate data
- Right to erasure: to request deletion of data in certain circumstances
- Right to restrict processing: to request that we limit how we use your data
- Right to data portability: to receive your data in a portable format where technically feasible
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: at any time, where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your data has been mishandled.
10. Third-Party Links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.
11. Children's Privacy
This website is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us so we can delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. Significant changes will be reflected in an updated "Last Updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the revised policy.
13. Contact
For any privacy-related questions, data subject requests, or concerns:
- Email: [email protected]
- Address: 38 Charoen Prathet Road, Mueang, Chiang Mai 50100, Thailand
- Phone: +66 53 284 67 91