Privacy Policy

1. Introduction

Sombat ("we", "our", "the practice") is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all personal data collected through our website at sombatbed.biz and through our client engagement process.

This policy is governed by the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand. If you have any questions about this policy, please contact us at [email protected].

2. Who We Are

Data Controller: Sombat Legal Services
119 Thanon Sanam Bin, Nai Mueang, Mueang, Ubon Ratchathani 34000, Thailand
Email: [email protected]

3. Information We Collect

We collect information you provide directly when you:

• Submit an enquiry through our website contact form (name, email address, phone number, message content)
• Engage our legal services as a client (additional information required to deliver those services)
• Contact us by phone or email

We may also collect limited technical information automatically when you visit our website, including your IP address, browser type, and pages visited. This is used only to understand how the website is used and to improve its performance.

Legal Basis for Processing

We process your personal data on the following bases:

• Consent – when you submit our contact form or agree to cookie use
• Contract – when processing is necessary to deliver legal services you have requested
• Legitimate interest – to maintain records, respond to enquiries, and improve our services
• Legal obligation – where Thai law requires us to process or retain certain information

4. How We Use Your Information

• To respond to your enquiries and provide legal services
• To communicate with you about your matter
• To maintain accurate records as required by professional obligations
• To improve our website and understand how visitors use it
• To comply with legal and regulatory requirements

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

We retain client records for a minimum of 10 years after the conclusion of a matter, in line with standard legal practice and Thai legal requirements. Website enquiry data not leading to client engagement is held for no longer than 12 months. You may request deletion of your information at any time (subject to legal retention obligations).

6. Data Sharing

We may share your information with:

• Courts, land registries, or other government bodies as required by your legal matter
• Third-party professionals (e.g. valuers, translators) engaged in connection with your matter, with your knowledge
• Technology providers who assist us in running our website (e.g. analytics), who are bound by data processing agreements

We do not transfer personal data outside Thailand except where necessary for the conduct of your legal matter, and only in compliance with PDPA requirements.

7. Cookies

Our website uses cookies to function correctly and to understand how visitors use it. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include access controls, secure file storage, and clear internal procedures for handling sensitive client information. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

9. Your Rights

Under the PDPA and applicable Thai law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal retention requirements)
• Object to processing in certain circumstances
• Withdraw consent at any time where processing is based on consent
• Data portability where technically feasible
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may include links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

11. Children

Our services are directed to adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have received data from a minor, please contact us so we can delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify clients of material changes where possible. The most recent version will always be available on our website. This policy was last updated on 25 June 2025.

13. Contact Us

For privacy-related enquiries or to exercise your rights:

• Email: [email protected]
• Address: 119 Thanon Sanam Bin, Nai Mueang, Mueang, Ubon Ratchathani 34000, Thailand