Privacy Policy

1. Introduction

Aroon Partners ("we", "us", "our") is an entertainment law practice located at 268 Sukhumvit Soi 11, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand. We are committed to handling personal data responsibly and in compliance with the Personal Data Protection Act B.E. 2562 (PDPA).

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it. It applies to all personal data collected through our website, enquiry forms, email correspondence, and the delivery of our legal services.

2. Data We Collect

We collect the following categories of personal data:

• Identity data: name, professional title, company name.
• Contact data: email address, telephone number, postal address.
• Enquiry content: the substance of messages submitted through our contact form or sent by email.
• Technical data: IP address, browser type, and pages visited, collected via website analytics cookies with your consent.

We collect this data when you submit an enquiry form on our website, contact us by email or telephone, or engage us to provide legal services.

3. Legal Basis and Purpose

We process personal data on the following legal bases under the PDPA:

• Contract performance: to respond to enquiries, prepare engagement letters, and deliver the legal services you have retained us to provide.
• Legitimate interests: to maintain records of past engagements for quality and continuity purposes, and to improve our website and services.
• Consent: to place non-essential cookies on your device and, if you have opted in, to send occasional updates about developments in Thai entertainment law. You may withdraw this consent at any time.
• Legal obligation: to comply with applicable Thai law, including record-keeping requirements applicable to law practices.

4. Data Retention

We retain personal data for the following periods:

• Enquiries that do not result in an engagement: 12 months from last contact.
• Matter files for completed engagements: 7 years from the date of closure, reflecting professional obligations applicable to legal practitioners in Thailand.
• Analytics data collected via cookies: 26 months from collection, in line with standard analytics retention periods.

5. Data Sharing

We do not sell or rent personal data to third parties. We may share data in the following circumstances:

• Overseas counsel: where an engagement requires coordination with legal practitioners in other jurisdictions, we may share relevant matter information with those practitioners under confidentiality obligations.
• Technology service providers: we use a small number of trusted service providers for email infrastructure and website analytics. These providers process data only on our instructions and are subject to appropriate data processing agreements.
• Legal requirement: we may disclose data where required by a court order, regulatory authority, or applicable Thai law.

6. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Matter files are held on access-controlled systems. Correspondence is transmitted over encrypted connections. Access to client data is restricted to members of the firm on a need-to-know basis. In the event of a data breach that creates a material risk to data subjects, we will notify the Personal Data Protection Committee and affected individuals in accordance with the PDPA.

7. Cookies

We use essential cookies to operate the website and, with your consent, analytics cookies to understand how visitors use our pages. You can manage cookie preferences at any time through our Cookie Policy page. Withdrawing consent to non-essential cookies does not affect the functioning of the site.

8. Your Rights

Under the PDPA, you have the following rights in relation to personal data we hold about you:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of personal data, subject to our legal obligations to retain certain records.
• Restriction: to request that we limit the processing of your data in certain circumstances.
• Portability: to receive a copy of data you have provided to us in a structured, machine-readable format.
• Objection: to object to processing based on legitimate interests.
• Withdrawal of consent: to withdraw consent to processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Third-Party Links

Our website may contain links to external sites, including court databases, regulatory bodies, and industry resources. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies before providing any personal data.

10. Age Restriction

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We will notify active clients of material changes by email where we hold contact details for them.