Legal Documents

Privacy Policy

Last Updated: 12 May 2025

mongkolz (the "Practice") is committed to handling personal data with care and in accordance with applicable law. This policy explains what information we collect, how we use it, and the rights available to individuals in relation to their personal data.

This policy applies to personal data collected through our website at https://mongkolz.world, through our contact form, and through direct communication with the Practice. It does not apply to data held as part of a client matter file, which is governed by the terms of engagement agreed at the outset of each matter.

1. Personal Data We Collect

When you contact us through the website, we may collect the following:

Full name — to address you appropriately and maintain contact records.
Email address — to respond to your enquiry.
Telephone number — if provided, to allow us to call you if that is your preference.
Message content — the substance of your enquiry, which may include information about your pension situation.

We also collect basic technical data through cookies and server logs, including IP address, browser type, and pages visited. See our Cookie Policy for details.

2. Legal Basis for Processing

We process personal data under the following legal bases, as set out in the Personal Data Protection Act B.E. 2562 (PDPA):

Consent — for optional communications and non-essential cookies, where you have indicated agreement.
Legitimate interest — for managing enquiries, improving the website, and maintaining professional records.
Contract — for processing data necessary to perform legal services under a client engagement agreement.

3. How We Use Personal Data

To respond to enquiries submitted through the contact form.
To conduct conflict-of-interest checks before accepting a new matter.
To manage and conduct client matters under the terms of engagement.
To comply with legal and professional obligations, including record-keeping requirements.
To improve the performance and content of the website using anonymised analytics data.

We do not use personal data for marketing purposes without prior consent, and we do not sell personal data to third parties.

4. Data Sharing

Personal data is not shared with third parties except in the following circumstances:

Pension authorities and regulatory bodies — where sharing is necessary to conduct a matter on your behalf, and only with your instruction.
Technology service providers — such as website hosting and analytics providers, who process data solely on our instruction under data processing agreements.
Legal or regulatory requirement — where disclosure is required by law, court order, or by a competent regulatory authority.

5. Data Retention

Enquiry data is retained for 12 months from the date of the enquiry if no client engagement follows. Client matter files are retained for a minimum of 7 years following the conclusion of the matter, in accordance with professional obligations. Cookie and analytics data is retained for the periods described in the Cookie Policy.

6. Data Protection Measures

HTTPS encryption for all data transmitted through the website.
Access controls limiting data access to authorised staff only.
Locked physical storage for client documents held in chambers.
Password-protected and encrypted digital file storage.
Regular review of data handling procedures.

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the Office of the Personal Data Protection Committee (PDPC) within the timeframes required by the PDPA.

7. Cookies

This website uses cookies. Essential cookies are necessary for basic site functions and are always active. Optional cookies (analytics and preferences) are activated only with your consent. For a full explanation of the cookies used and how to manage your preferences, please see the Cookie Policy.

8. Your Rights Under Thai Data Protection Law

Under the PDPA, you have the following rights in relation to your personal data held by the Practice:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to request correction of inaccurate data.
Right to erasure — to request deletion of data in certain circumstances.
Right to data portability — to receive your data in a structured, commonly used format.
Right to object — to object to processing based on legitimate interest.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

The website may contain links to external resources, including government websites and professional bodies. We are not responsible for the privacy practices of those websites. We recommend reviewing their privacy notices before submitting personal information.

10. Children's Privacy

The services of mongkolz are directed at adults of 18 years or older. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us at the address below and we will delete it promptly.

11. Changes to This Policy

This policy may be updated from time to time to reflect changes in our practices or applicable law. The revised version will be posted on this page with an updated date. Continued use of the website following any change constitutes acceptance of the revised policy.

12. Contact for Data Enquiries

For questions about this policy or to exercise your data rights, please contact:

mongkolz

145/8 Silom Road, Suriya Wong, Bang Rak, Bangkok 10500, Thailand

Email: [email protected]

Telephone: +66 2 234 7651