Privacy Policy

1. Introduction

Garuda Law ("we", "our", or "us"), located at 174 Sathorn Road, Sathorn, Bangkok 10120, Thailand, is committed to handling your personal information with the same discretion and respect we bring to every matter we manage.

This Privacy Policy applies to all personal data collected through our website at garudawonfin.world, through enquiry forms, and in the course of providing our inheritance and estate legal services. It describes what data we collect, why we collect it, how we use it, and your rights regarding that data. Questions may be directed to [email protected].

2. Personal Data We Collect

We collect personal data only where it is genuinely necessary to provide our services or communicate with you. The categories of data we may collect include:

• Identity information: your full name, and in some matters, names of beneficiaries or deceased family members as required for legal proceedings.
• Contact details: email address, telephone number, and postal address.
• Enquiry content: information you volunteer through our contact form or in written correspondence describing your situation.
• Technical data: IP address, browser type, device type, and pages visited, collected automatically via server logs and analytics tools.
• Cookie data: your preferences recorded when you interact with our cookie consent mechanism (see Section 5).

We do not seek to collect sensitive categories of data unless they are strictly necessary for a specific legal matter you have asked us to handle.

Retention: client matter files are retained for seven years following the close of a matter, in accordance with applicable professional obligations. Website enquiry data not leading to an engagement is held for up to 24 months.

3. How We Use Your Data

We use the personal data we hold for the following purposes, each resting on a lawful basis under applicable Thai personal data protection law (PDPA B.E. 2562) and internationally recognised standards:

• Responding to enquiries — to contact you following a submission through our website (basis: your consent at point of submission).
• Providing legal services — to fulfil the agreement formed when you engage our firm, including preparing documents, filings, and correspondence (basis: contract performance).
• Compliance with legal obligations — to meet our obligations under Thai law, professional regulations, and court requirements (basis: legal obligation).
• Improving our website — to understand how visitors use our site so we can make it clearer and more useful (basis: legitimate interest, balanced against your privacy).
• Service communications — to send you relevant information about your matter; we do not send unsolicited marketing without your explicit agreement.

We do not sell your personal data to third parties. We do not use your data for profiling or automated decision-making that produces legal effects.

4. Data Sharing

We share your personal data only to the extent necessary:

• Courts and government bodies — as required by law or court order in connection with your legal matter.
• Counterparties and their representatives — to the extent required to progress your matter.
• Professional advisors — such as notaries or translators engaged in support of your matter, bound by confidentiality.
• Technology service providers — such as our secure email and document management platforms, operating under data processing agreements.
• Analytics providers — aggregated, pseudonymous data only (e.g., Google Analytics). You may opt out via your cookie preferences.

5. Cookies

Our website uses a small number of cookies. Essential cookies are necessary for the site to function; others are optional and require your consent. You can review and update your preferences at any time on our Cookie Policy page.

• Essential cookies: required for the site to operate correctly; they cannot be disabled.
• Analytics cookies: help us understand how visitors navigate our site so we can improve it.
• Preference cookies: remember choices you have made, such as cookie consent status.

6. How We Protect Your Data

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or disclosure. These include encrypted transmission (TLS), access controls limiting data to those who need it, regular review of our data handling practices, and a documented procedure for responding to any data security incident. In the unlikely event of a breach affecting your rights, we will notify you and the relevant authority without undue delay.

7. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable principles, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: in certain circumstances, ask us to delete data we no longer have a lawful reason to hold.
• Restriction: ask us to limit processing while a query or complaint is being resolved.
• Portability: receive data you have provided in a structured, machine-readable format where technically feasible.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have not been respected.

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external resources such as court portals or government registries. We are not responsible for the privacy practices of those sites and encourage you to read their policies before sharing any personal information there.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If a minor's information becomes relevant to a legal matter (for example, a minor beneficiary), we collect only what is legally necessary and handle it with heightened care.

10. Changes to This Policy

We review this policy periodically and may update it to reflect changes in law or our practices. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website following such changes constitutes acknowledgement of the updated policy.

11. Contact Us

If you have any questions about this policy or wish to exercise your rights, please reach out. We will handle your query with the same care and discretion we bring to every matter.