TANA & ASSOCIATESLegal Services
TH

Privacy Policy

Effective from

TANA & ASSOCIATES is an operating name used for legal services by Mr. Thana Sangsart, who is the data controller for the purposes of this policy (“we”, “us” or “our”).

This policy explains how we collect, use, disclose and protect personal data when you visit tanaassociates.com or contact us by telephone, email or LINE.

1. Data controller and contact details

Data controller: Mr. Thana Sangsart, operating under the name TANA & ASSOCIATES
Address: 140 Soi Suwichan Damri, Somdet Phra Pinklao Road, Bang Yi Khan, Bang Phlat, Bangkok 10700, Thailand
Phone: 064-696-8278
Email: [email protected]
LINE ID: renail11

2. Personal data we may collect

Depending on how you use the website or contact us, we may collect:

  1. Technical and access data, such as IP address, access date and time, requested URL, device or browser type, and logs necessary to operate and secure the website.
  2. Identity and contact data, such as your name, phone number, email address, LINE ID and preferred contact method.
  3. Inquiry or matter information, including preliminary facts, counterparties, documents and messages you provide.
  4. Sensitive personal data that may be contained in case facts or documents, such as health data, criminal records, beliefs or other data classified as sensitive by law. Please avoid sending such data before we have completed a conflict check and expressly accepted the matter.
  5. Personal data relating to other persons that you provide to us. You should have an appropriate right or legal basis to disclose that data.

The website does not provide user accounts or a contact form. Information sent by phone, email or LINE is provided voluntarily. However, infrastructure providers may process technical data when the website is accessed.

We may process personal data to:

  • operate and secure the website, prevent attacks and investigate abnormal activity, based on our legitimate interests;
  • respond to inquiries, arrange appointments, assess a potential engagement and take steps at your request before entering into a contract, based on pre-contractual necessity and legitimate interests;
  • provide agreed services, administer documents, communicate and bill for services, based on contract performance;
  • conduct conflict checks and establish, exercise or defend legal claims, based on legitimate interests and the legal-claims grounds permitted by law;
  • comply with laws, regulatory requirements, court orders or legal process, based on legal obligations; and
  • process sensitive personal data where we have explicit consent, where necessary to establish, exercise or defend legal claims, or where another legal ground applies.

A legal basis is used only where it is relevant to the specific purpose and circumstances of the processing.

4. Whether you must provide data

You are not generally required to provide personal data. However, certain data may be necessary for us to respond, conduct a conflict check, assess or perform a service, or comply with legal obligations. If you do not provide necessary data, we may be unable to respond, assess the matter or accept an engagement.

5. Disclosures

We may disclose personal data, to the extent necessary, to:

  • hosting, CDN, website-security and infrastructure providers, including Cloudflare;
  • email, telecommunications and messaging service providers, including LINE;
  • technology providers or contractors supporting our systems, subject to appropriate confidentiality and data-protection terms;
  • lawyers, experts or professional service providers involved in your matter where legally permitted and necessary; and
  • courts, public authorities, officials or other persons where required by law.

We do not sell personal data.

6. International processing and transfers

Some service providers may operate systems or personnel outside Thailand. Personal data may therefore be processed or transferred internationally. We will limit such processing to what is necessary and apply measures required by applicable law.

7. Retention

  • Technical data and system logs are retained for periods necessary for security and in accordance with the relevant service provider’s standards.
  • Inquiry or contact data that does not result in an engagement is retained for no longer than one year after the last contact, after which it will be deleted, destroyed or anonymised unless retention is required by law or for legal claims.
  • Minimal information necessary for conflict checking may be retained for as long as reasonably necessary to prevent professional conflicts.
  • If we accept an engagement, client and matter data is retained for periods necessary to perform the services, comply with legal, accounting and tax obligations, preserve legal rights and meet professional standards. A separate client privacy notice or engagement terms may also apply.

8. Security

We use technical and organisational measures appropriate to the nature and risks of the data to protect against unauthorised loss, access, use, alteration or disclosure, and we review those measures when necessary.

Internet, email and messaging transmissions carry inherent risks. Please do not send confidential or sensitive information beyond what is necessary until we have confirmed an appropriate channel.

9. Your rights

Subject to statutory conditions and exceptions, you may have the right to:

  • withdraw consent;
  • access and obtain a copy of your personal data, including information about the source where data was not collected directly from you;
  • receive or transfer data where the law provides a right to data portability;
  • object to processing;
  • request deletion, destruction or anonymisation;
  • request restriction of processing;
  • request correction of inaccurate or outdated data; and
  • lodge a complaint with the Personal Data Protection Committee.

You may exercise your rights using the contact details above. We may request information to verify your identity and will respond within the period required by law. If a request is refused, we will provide reasons where required.

10. Cookies and analytics

As of the effective date, this website does not intentionally deploy web analytics, advertising cookies or behavioural marketing trackers. Hosting, CDN and security services may nevertheless process the technical data described in this policy.

The website may link to third-party services or websites. Their processing activities are governed by their own privacy policies. Please review those policies before using the relevant service.

12. Changes to this policy

We may update this policy when laws, practices or website systems change. The latest revision date will be displayed on this page, and material changes will be communicated by an appropriate method.