Privacy Policy
Last Updated: January 15, 2026
Effective Date: January 15, 2026
Pinnacle Legal is committed to protecting the privacy and personal data of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Thai data protection laws and international best practices.
1. Information We Collect
Personal Data Collected Through Forms:
- Name and contact information (email address, phone number)
- Company or organization name (when relevant to legal services)
- Information about legal matters or inquiries provided in messages
- Any additional information voluntarily provided through contact forms
Data Collected Automatically:
- IP address and browser type
- Pages visited and time spent on our website
- Referring website addresses
- Device information and operating system
Legal Basis for Processing:
We process personal data based on consent (when you submit contact forms), legitimate interest (website analytics and service improvement), and contractual necessity (when providing legal services to clients).
2. How We Use Your Information
Personal information collected is used for the following purposes:
- Responding to inquiries about our legal services
- Providing legal counsel and representation as contracted
- Communicating about case developments, appointments, and service updates
- Processing service requests and maintaining client records
- Analyzing website usage to improve our online presence and user experience
- Complying with legal and regulatory obligations
- Preventing fraud and maintaining security of our systems
3. Data Sharing and Disclosure
Limited Third-Party Sharing:
We do not sell, trade, or rent personal information. We may share information with:
- Service providers who assist with website hosting, email delivery, and data storage (under confidentiality agreements)
- Professional advisors when necessary for legal service delivery
- Government authorities when legally required or in response to valid legal processes
- Third parties with your explicit consent
International Data Transfers:
Some service providers may be located outside Thailand. In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with Thai data protection requirements.
4. Data Security Measures
We implement appropriate technical and organizational measures to protect personal data:
- Encryption of data transmission using SSL/TLS protocols
- Secure storage of client information with access controls
- Regular security assessments and system updates
- Staff training on data protection and confidentiality obligations
- Incident response procedures for potential data breaches
- Physical security measures for office premises and document storage
5. Data Retention
Personal data is retained for the following periods:
- Inquiry Data: Contact form submissions retained for 12 months unless converted to client engagement
- Client Engagement Data: Retained for duration of legal service provision plus 10 years as required by Thai Bar Association record-keeping requirements
- Website Analytics: Aggregated data retained indefinitely; individual user data retained for 26 months
- Marketing Communications: Retained until consent is withdrawn or for 3 years of inactivity
6. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience and analyze website usage. Cookie types include:
- Essential Cookies: Required for website functionality and security
- Analytics Cookies: Used to understand how visitors interact with our website
- Preference Cookies: Remember user settings and preferences
For detailed information about our cookie usage and your control options, please see our Cookie Policy.
7. Your Privacy Rights
Under Thai data protection law, you have the following rights:
- Right to Access: Request confirmation of whether we process your personal data and obtain a copy
- Right to Rectification: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of personal data in certain circumstances
- Right to Data Portability: Receive personal data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent for data processing at any time
- Right to Lodge Complaint: File a complaint with the Personal Data Protection Committee of Thailand
To exercise these rights, contact us at [email protected].
8. Children's Privacy
Our legal services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18, we will delete such information promptly.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing the privacy policies of any third-party sites you visit.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Continued use of our website after changes constitutes acceptance of the updated policy.
11. Contact Information
For questions about this Privacy Policy or our data practices, contact:
Pinnacle Legal
27/4 Samsen Road, Wat Sam Phraya
Phra Nakhon, Bangkok 10200, Thailand
Email: [email protected]
Phone: +66 2 547 1863