Privacy Policy

1. Introduction

Suan Accord ("we", "us", "our") is a legal advisory firm registered and operating in Chiang Mai, Thailand. We handle personal data responsibly and are committed to managing all information we collect in a lawful, transparent manner.

This Privacy Policy explains what personal data we collect, how and why we use it, how long we retain it, and what rights you hold in relation to it. It applies to data collected through this website (https://suanaccordeons.info) and through direct engagement with our firm.

This Policy is governed by Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). Where clients are located in the European Economic Area, the General Data Protection Regulation (GDPR) may also apply. We apply the higher applicable standard in each case.

Questions about this Policy: [email protected]

2. Data We Collect

2.1 Information you provide directly

• Full name, email address, telephone number — via website enquiry forms
• Subject matter description — information about the legal matter you wish to discuss
• Identity and residency documents — provided during formal client engagements
• Financial and corporate records — provided in investment structuring mandates

2.2 Information collected automatically

• IP address, browser type, and device information — via website analytics
• Pages visited, time on site, and referring URLs — via analytics cookies
• Cookie consent preferences — stored in your browser's local storage

2.3 Legal basis for processing

We process personal data on the following lawful bases: (a) your consent, where requested; (b) performance of a contract or pre-contractual steps at your request; (c) compliance with a legal obligation; and (d) our legitimate interests in operating and improving our services.

Retention: Enquiry data is held for up to 24 months. Client engagement records are retained for a minimum of 7 years in accordance with Thai legal professional requirements. Analytics data is retained for up to 26 months.

3. How We Use Your Data

• Responding to enquiries submitted via the website contact form
• Conducting situation reviews and delivering legal advisory services
• Preparing engagement letters and client documentation
• Communicating progress updates during active engagements
• Complying with applicable legal and regulatory obligations
• Analysing website usage to improve content quality and relevance

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. Marketing communications are sent only where express consent has been given and may be withdrawn at any time.

4. Sharing Personal Data

We share personal data only where necessary:

• Thai government agencies: Where required to process immigration applications, BOI filings, or registration documents on behalf of clients
• Analytics providers: Anonymised usage data shared with Google Analytics, subject to your cookie preferences
• Legal obligation: Where required by law, court order, or regulatory authority

Third-party service providers with whom we share data are subject to appropriate data processing agreements.

5. Data Protection Measures

• Website connections secured via HTTPS encryption
• Client documents stored on access-controlled systems with restricted permissions
• Physical files held in locked storage at our Chiang Mai office
• Regular review of access permissions and data handling procedures
• Staff handling personal data are informed of their obligations under the PDPA

In the event of a personal data breach likely to affect your rights, we will notify you and the relevant supervisory authority without undue delay.

6. Cookies

This website uses cookies. Necessary cookies support basic site functionality. Analytics and preference cookies are placed only with your consent. See our Cookie Policy for full details.

7. Your Rights

Under the PDPA and, where applicable, the GDPR, you hold the following rights:

• Right to access: Request a copy of personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, where no legitimate basis for retention exists
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is consent-based
• Right to lodge a complaint: File a complaint with the Personal Data Protection Committee of Thailand or your local supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external sites operated by third parties. This Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If we become aware that such data has been collected, we will delete it promptly.

10. International Data Transfers

Where personal data is transferred outside Thailand — for example, through the use of cloud-hosted analytics services — we ensure that appropriate safeguards are in place in accordance with the PDPA and, where applicable, GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of the website following such updates constitutes acceptance of the revised Policy.

12. Contact

Data Controller: Suan Accord

Address: 42/5 Tha Phae Gate, Phra Singh, Mueang Chiang Mai, Chiang Mai 50200, Thailand

Email: [email protected]

Telephone: +66 53 418 673