Privacy Policy

1. Introduction

Ayara Legal ("we", "our", "us") is a legal practice based at 95 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand. We are committed to handling the personal information you share with us carefully and in keeping with the law.

This Privacy Policy describes the personal data we collect, how we use it, how long we retain it, and the rights you have over your information. It applies to all personal data collected through our website at https://ayaralegaad.biz and through direct enquiries to our office.

This policy is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about how your data is handled, please contact us at [email protected].

2. Data We Collect

When you use our website or contact us, we may collect the following personal data:

• Identity data: your name, as provided in contact forms or correspondence
• Contact data: email address and telephone number
• Enquiry content: information you share in the message field of our contact form
• Technical data: IP address, browser type, pages visited, and session duration (collected via analytics cookies, with your consent)
• Cookie preferences: your choices regarding non-essential cookies, stored locally

We do not collect sensitive personal data (such as health information or financial details) through our website. Such information may be shared in the course of formal legal instruction and is handled under attorney-client confidentiality.

Legal basis for processing

• Processing contact form submissions: legitimate interest in responding to enquiries
• Analytics cookies: your explicit consent via our cookie banner
• Legal work: contract performance and legal obligation

Retention periods

Website enquiry data is retained for up to 12 months unless it leads to an ongoing engagement. Data related to legal matters is retained for a minimum of 7 years in accordance with Thai legal professional obligations.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To provide the legal services you have engaged us for
• To understand how our website is used and improve it (analytics, with consent)
• To comply with legal and professional obligations

We do not use your data for unsolicited marketing. We do not sell your personal data to any third party.

Third-party sharing

We may share data with: (1) analytics service providers (e.g. Google Analytics) under consent; (2) cloud infrastructure providers for secure data storage; (3) regulatory or legal authorities where required by law. All third-party processors are required to handle your data securely and in accordance with applicable law.

4. Data Security

We take reasonable and appropriate technical and organisational measures to protect your personal data. These include:

• SSL/TLS encryption on all website communications
• Access controls limiting data to authorised personnel
• Case management data stored on secure internal systems
• Regular review of data handling practices

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant Thai supervisory authority within the timeframes required by the PDPA.

5. Cookies

Our website uses cookies to function and, with your consent, to collect analytics data. Essential cookies are required for the website to operate and cannot be disabled. Non-essential cookies (analytics, marketing, preferences) are only activated after you provide consent via our cookie banner.

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to access: you may request a copy of the personal data we hold about you
• Right to rectification: you may ask us to correct inaccurate or incomplete data
• Right to erasure: you may request deletion of your data in certain circumstances
• Right to data portability: you may request your data in a structured, machine-readable format
• Right to object: you may object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

If you believe your data rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data to us, please contact us and we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the website after such changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify users directly.

10. Contact

For any privacy-related questions or to exercise your data rights, please contact:

• Practice: Ayara Legal
• Address: 95 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand
• Phone: +66 53 218 7649
• Email: [email protected]