Privacy Policy

Introduction

Iron Petal is committed to protecting the privacy and confidentiality of personal information provided by clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and relevant legal professional standards.

By using our website or engaging our legal services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We collect personal information that you voluntarily provide to us through our website contact forms, email communications, telephone calls, and in-person consultations. The types of information we may collect include:

• Name and contact details (email address, phone number, business address)
• Company or organization name and position
• Nature of legal inquiry or engagement
• Documentation and information provided in connection with legal services
• Financial information for billing and payment processing

Our website also collects technical information through cookies and analytics tools, including IP address, browser type, device information, and pages visited. See our Cookie Policy for detailed information about cookie usage.

Legal Basis for Processing

We process personal information on the following legal grounds:

• Contractual necessity: To provide legal services you have engaged us to perform
• Legitimate interest: To maintain business records, improve our services, and communicate about matters relevant to existing client relationships
• Legal obligation: To comply with professional ethics rules, regulatory requirements, and legal obligations applicable to law firms in Thailand
• Consent: For marketing communications and analytics where required by law

How We Use Your Information

Personal information is used for the following purposes:

• Providing legal advisory and representation services
• Responding to inquiries and consultation requests
• Preparing legal documents and communications
• Processing payments and maintaining billing records
• Communicating about legal matters and service updates
• Maintaining client files and case records as required by professional standards
• Improving website functionality and user experience
• Complying with legal and regulatory requirements

Data Sharing and Disclosure

We maintain strict confidentiality of client information in accordance with attorney-client privilege and professional ethics obligations. Personal information may be shared only in the following limited circumstances:

• Service providers: Trusted third parties who assist with business operations (payment processors, document management systems, IT support) under strict confidentiality agreements
• Professional advisors: Other legal professionals, accountants, or consultants when necessary for providing services to clients
• Legal requirements: When required by court order, legal process, or regulatory authority
• With your consent: When you have provided explicit authorization for specific disclosures

We do not sell, rent, or trade personal information to third parties for marketing purposes.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Security measures include:

• Encrypted data transmission and storage for sensitive information
• Secure document management systems with access controls
• Regular security assessments and updates
• Staff training on confidentiality and data protection
• Physical security measures for office premises and file storage

While we take reasonable steps to protect information, no method of transmission or storage is completely secure. We cannot guarantee absolute security of data transmitted through the internet or stored electronically.

Data Retention

Client files and associated personal information are retained for the duration required by Thai professional standards for legal practice, which is typically a minimum of five years following the conclusion of a legal matter. Some categories of information may be retained longer where required for regulatory compliance, potential professional liability claims, or legitimate business purposes. Information collected through website analytics and cookies is typically retained for shorter periods as specified in our Cookie Policy.

Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal information:

• Access: Request access to personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of personal information in certain circumstances
• Objection: Object to processing of personal information for specific purposes
• Restriction: Request limitation of how we use your information
• Data portability: Request transfer of information in structured format
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis

Please note that these rights are subject to limitations under applicable law and professional ethics obligations. Some requests may be denied where we have legal obligations to retain information or where attorney-client privilege applies.

To exercise these rights, contact us at [email protected]. We will respond to requests within the timeframes required by law.

Cookies and Analytics

Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. We use Google Analytics to understand how visitors interact with our website. This involves collection of information such as pages viewed, time spent on the site, and navigation patterns.

For detailed information about cookie types, purposes, and your choices regarding cookies, please refer to our Cookie Policy.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this policy regularly. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy, to exercise your data protection rights, or to submit a privacy-related inquiry:

If you are not satisfied with our response to your privacy inquiry, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or relevant supervisory authority.