Privacy Policy

1. Introduction

Sampatti Legal ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains how we collect, use, and protect information about individuals who contact us, use our website, or engage our services.

This policy applies to all personal data we process in connection with our legal services and our website at https://sampatt.world. It is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Questions about this policy should be directed to: [email protected]

2. Data We Collect

We collect personal data in the following ways:

Information you provide directly

• Name and contact details provided via our enquiry form or by email
• Telephone number, if provided
• Information about your legal matter shared during the course of enquiry or engagement
• Documents provided in connection with a matter we are handling

Information collected automatically

• Website usage data collected via cookies (see our Cookie Policy)
• Browser type, device type, and approximate location (country level)
• Pages visited and time spent on each page

3. How We Use Personal Data

We use personal data for the following purposes:

• To respond to enquiries — when you contact us, we use your information to respond and to discuss whether our services are relevant to your situation.
• To provide legal services — once an engagement is confirmed, we use the information you provide to carry out the agreed work.
• To maintain client records — we retain records of completed matters as required by professional obligations.
• To improve our website — aggregated, anonymised data from cookies helps us understand how the website is used.
• To comply with legal obligations — in some circumstances, we are required to retain or disclose information by law.

We do not use personal data for marketing without explicit consent, and we do not sell personal data to any third party.

4. Legal Basis for Processing

Under the PDPA, we rely on the following legal bases for processing personal data:

• Consent — for the use of non-essential cookies and for any marketing communications you have agreed to receive.
• Contractual necessity — to carry out the legal services agreed in an engagement letter.
• Legitimate interest — to respond to enquiries, to maintain appropriate records, and to operate our website securely.
• Legal obligation — where we are required to retain or disclose information by applicable law or professional regulation.

5. Data Retention

We retain personal data for as long as necessary for the purpose for which it was collected:

• Enquiries that do not result in an engagement: up to 12 months
• Client matter records: 7 years from the conclusion of the matter, in accordance with Thai professional retention requirements
• Website analytics data: aggregated data retained indefinitely; individual session data retained for up to 26 months

After the applicable retention period, personal data is securely deleted or anonymised.

6. Data Protection Measures

• Client files are held in access-controlled systems, accessible only to practitioners with a direct responsibility for the relevant matter.
• Electronic data is stored on encrypted systems with regular security reviews.
• Physical documents are held in locked storage and disposed of securely when no longer required.
• In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority within the timeframes required by the PDPA.

7. Sharing of Data

We do not share personal data with third parties except in the following circumstances:

• With your consent — for example, when you ask us to liaise with a financial institution or another professional on your behalf.
• To carry out the work — for example, when coordinating with the Land Department or other official bodies in the course of estate administration.
• Under legal obligation — where required by law, court order, or professional regulation.
• Service providers — we use a small number of trusted third-party services (such as website hosting and analytics tools) whose access to personal data is limited to what is necessary and is governed by data processing agreements.

8. Cookies

We use cookies on our website. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your personal data, subject to legal retention obligations.
• Right to restriction — to request that we limit our use of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
• Right to object — to object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint — with the Personal Data Protection Committee of Thailand or the relevant supervisory authority in your country of residence.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18 without the consent of a parent or legal guardian. If you believe we have collected data from a minor without appropriate consent, please contact us promptly.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this policy from time to time. When changes are made, the revised policy will be published on this page with an updated date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

13. Contact

Data controller: Sampatti Legal
Address: 64 Lang Suan Road, Lumphini, Pathumwan, Bangkok 10330, Thailand
Email: [email protected]
Telephone: +66 2 627 1485