Privacy Policy

1. Introduction

Karuna ("we", "us", "our") is committed to protecting the personal data of everyone who contacts us or uses our services. This policy explains what information we collect, how we use it, and the rights you have over your data.

We operate as a family law practice based in Bangkok, Thailand, and process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Information We Collect

We collect personal information in the following ways:

2.1 Information you provide directly

• Full name
• Email address
• Phone number (if provided)
• Message content submitted through our contact form
• Details shared during consultations relevant to family law matters

2.2 Information collected automatically

• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Cookie data (see Section 5)

2.3 Legal basis for processing

• Consent — for marketing communications and non-essential cookies
• Legitimate interest — for responding to enquiries and improving our website
• Contract — for delivering legal services to clients

Retention: Contact form submissions are retained for up to 24 months. Client engagement records are retained for 7 years in accordance with professional obligations.

3. How We Use Your Information

• Responding to enquiries submitted through our contact form
• Providing family law consultation and related services
• Maintaining records required for our professional obligations
• Sending service-related communications (appointment reminders, document requests)
• Improving our website and understanding how visitors use it
• Complying with legal or regulatory requirements

We do not sell personal data to third parties. We do not use your data for automated decision-making.

We may share data with trusted third-party service providers (such as website hosting or analytics platforms) who act as data processors and are bound by appropriate data processing agreements.

4. How We Protect Your Data

• All data transmitted to and from our website is encrypted using HTTPS/TLS
• Access to client records is restricted to authorised personnel only
• Physical and digital records are stored securely with access controls
• In the event of a data breach, we will notify affected individuals in accordance with the PDPA within 72 hours of becoming aware of the breach
• We conduct periodic reviews of our data handling practices

5. Cookies

We use cookies to support the basic functioning of our website and to understand how visitors interact with it. Cookies used include:

• Essential cookies — required for the website to function correctly
• Analytics cookies — used to understand page usage patterns
• Preference cookies — used to remember your choices

You can manage your cookie preferences through our Cookie Policy page.

6. Your Rights

Under the Thai PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your data where we have no legal obligation to retain it
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for any processing based on consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal data with them.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website following any update constitutes acceptance of the revised policy.

10. Contact

For privacy-related enquiries, please contact our data controller: