Privacy Policy

1. Who We Are

Lanna Estate is a specialist inheritance and estate legal practice registered and operating in Chiang Mai, Thailand. Our registered office is at 198 Suthep Road, Suthep, Mueang, Chiang Mai 50200. We are the data controller for personal information collected through this website and in connection with our legal services.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information — full name, email address, telephone number, and postal address when submitted through our contact form or provided during a client engagement.
• Matter-related information — details about your legal matter that you share with us in correspondence or during consultations, which may include family circumstances, asset details, and other sensitive personal information relevant to an estate or inheritance matter.
• Website usage data — information collected automatically when you visit our website, including your IP address, browser type, pages visited, and time spent on pages. This data is collected via cookies and analytics tools.
• Communication records — emails, written correspondence, and notes of telephone conversations relating to your enquiry or engagement.

3. How We Collect Your Information

• Directly from you when you complete the contact form on our website.
• Through email, telephone, or in-person communication when you enquire about or engage our services.
• Automatically through cookies and analytics tools as you browse our website.
• From third parties, such as other legal professionals, courts, or public registries, in the course of carrying out legal services on your behalf.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the PDPA:

• Consent — for marketing communications and non-essential cookies, where you have given explicit consent.
• Contractual necessity — processing required to provide the legal services you have engaged us to carry out.
• Legitimate interests — for the purposes of improving our website and understanding how it is used, where our interests do not override your rights.
• Legal obligation — where we are required by law to process or retain certain information, including professional record-keeping obligations under Thai legal regulations.

5. How We Use Your Information

• To respond to your enquiry and determine whether and how we can assist with your matter.
• To provide legal services under the terms of our engagement, including research, documentation, correspondence, and court representation where applicable.
• To maintain the records we are required to keep under professional and legal obligations.
• To improve the performance and content of our website through anonymised analytics.
• To send you relevant updates about your matter or, with your consent, information about our services.

6. Data Retention

We retain client matter files for a minimum of seven years from the close of the engagement, in compliance with Thai professional standards for legal records. Website enquiry data not leading to an engagement is retained for twelve months. Analytics data is retained for twenty-four months before being deleted or anonymised. You may request deletion of your data earlier where no legal obligation requires us to retain it.

7. Data Sharing

We do not sell or rent personal information. We may share your data with:

• Courts and government bodies — where necessary to conduct your legal matter, including submission of documents to the Civil Court, Land Department, or district offices.
• Other legal professionals — where co-counsel or corresponding lawyers in other jurisdictions are required for cross-border elements of your matter, and only with your knowledge.
• Service providers — such as website hosting providers and analytics platforms, who process data only as our processors under data processing agreements.
• Legal requirements — where disclosure is required by law, court order, or regulatory authority.

8. Data Security

We maintain appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted transmission of data between your browser and our server (HTTPS).
• Access controls ensuring that client files are accessible only to fee earners working on the relevant matter.
• Secure physical storage for paper documents containing personal information.
• Regular review of our data handling practices.

In the event of a data breach that is likely to affect your rights, we will notify you and, where required, the relevant authorities within the timeframes specified under the PDPA.

9. Cookies

Our website uses cookies to improve your browsing experience and to gather anonymised analytics data. For full details of the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.

10. Your Rights

Under the PDPA and applicable data protection principles, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where there is no lawful reason for us to continue holding it.
• Right to data portability — to receive your data in a commonly used format where technically feasible.
• Right to object — to object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint — with the Personal Data Protection Committee of Thailand if you believe your rights have been infringed.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.

12. Children's Privacy

Our legal services are intended for adults aged eighteen and over. We do not knowingly collect personal data from individuals under eighteen. If we become aware that data has been submitted by a minor, we will delete it promptly.

13. International Data Transfers

Where your matter involves overseas elements — for example, heirs residing outside Thailand — we may need to share information with legal professionals or authorities in other countries. We will do so only to the extent necessary for your matter and will inform you when such transfers are required.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

15. Contact Us

For any questions about this Privacy Policy or to exercise your data rights:

• Email: [email protected]
• Post: Lanna Estate, 198 Suthep Road, Suthep, Mueang, Chiang Mai 50200, Thailand
• Phone: +66 81 359 4286