Privacy Policy

1. Introduction

Rom Yen ("we", "us", "our") is a legal services practice based in Bangkok, Thailand. We handle personal data in the course of providing pension legal services — including entitlement reviews, appeal support, and full case assistance.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and the rights you have in relation to that data. It applies to all individuals who contact us, use our website, or engage our services.

We are committed to handling personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Contact details: full name, email address, telephone number
• Case-related information: pension documents, employment history, correspondence with pension authorities
• Communication records: messages sent through our contact form or by email
• Website usage data: pages visited, browser type, approximate location (via cookies)

We collect data directly from you (through contact forms, consultations, or correspondence) or through our website (via cookies and analytics tools).

Retention: Contact enquiries are retained for up to 12 months. Active case files are retained for 7 years following case conclusion, in line with Thai legal record-keeping requirements. Website analytics data is retained for up to 26 months.

3. How We Use Your Data

We process personal data for the following purposes:

• Responding to enquiries and providing the legal services you have requested
• Managing your case, including preparing documents and communicating with relevant authorities on your behalf
• Sending you updates relevant to your matter
• Improving our website and understanding how it is used
• Complying with legal obligations and professional standards

Legal basis: Processing is based on your consent (for contact form submissions and cookies), performance of a contract (for active service engagements), and our legitimate interests in operating a professional practice. We will not use your data for unrelated marketing without your explicit consent.

4. Data Sharing

We do not sell or rent personal data. We share it only where necessary:

• With relevant government agencies (Social Security Office, pension authorities) when required to manage your case, with your knowledge
• With website analytics providers (such as Google Analytics) in anonymised or aggregated form
• With professional indemnity insurers where disclosure is required
• Where required by Thai law or a court order

All third-party processors we use are bound by appropriate data protection obligations.

5. Data Protection Measures

We take practical steps to protect personal data from unauthorised access, loss, or disclosure:

• Electronic files are stored on password-protected systems with access limited to team members with a need to know
• Physical documents are stored in locked filing systems at our Sathorn Road office
• Communications containing sensitive data are transmitted via secure, encrypted channels
• Our website uses HTTPS encryption

In the event of a data breach that affects your rights, we will notify you and the relevant supervisory authority within the timeframes required by Thai PDPA.

6. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. You can manage your cookie preferences at any time. For full details, please read our Cookie Policy.

7. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Access: to receive a copy of the personal data we hold about you
• Rectification: to request correction of inaccurate data
• Erasure: to request deletion of your data in certain circumstances
• Restriction: to limit the processing of your data
• Portability: to receive your data in a structured, machine-readable format
• Objection: to object to processing based on legitimate interests
• Withdrawal of consent: at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been upheld, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

8. External Links

Our website may link to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately before sharing any data with them.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our site, please contact us and we will remove it promptly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The revised policy will be published on this page with an updated date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

11. Contact

For data protection enquiries, please contact:

• Rom Yen
• 90 Sathorn Road, Thung Maha Mek, Bangkok 10120, Thailand
• Email: [email protected]
• Phone: +66 2 287 9436