Privacy Policy

1. Data Controller

The data controller is Thapthim, a trademark and copyright practice with its principal office at 374 Phetchaburi Road, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand. For data-related enquiries, contact: [email protected].

2. Personal Data We Collect

We collect personal data when you submit the contact form on this website or correspond with us by other means. The categories of data collected include:

• Full name and contact email address (required for form submission)
• Telephone number, if provided voluntarily
• The content of your message or enquiry
• Technical data collected automatically: IP address, browser type, pages visited, and session duration (via analytics cookies, where consent is given)
• Cookie preference data, stored locally in your browser's localStorage

Data collected during a client engagement (engagement letters, matter correspondence, filing instructions) is subject to separate confidentiality and data handling provisions contained in the engagement letter.

3. Legal Basis for Processing

Under the PDPA, we rely on the following legal bases:

• Consent — for analytics cookies and optional marketing communications, where you have expressly agreed
• Contractual necessity — for data required to provide and manage a client engagement
• Legitimate interest — for responding to enquiries submitted through this website and for maintaining basic website security logs
• Legal obligation — where processing is required to comply with Thai law

4. How We Use Personal Data

• Responding to enquiries submitted through the contact form
• Conducting client engagements and preparing filings, agreements, and inquiry notes
• Maintaining records of engagement correspondence as required by professional obligations
• Analysing website usage patterns (where analytics consent is given) to improve the site's usefulness
• Complying with applicable legal and regulatory requirements

We do not use personal data for automated decision-making, profiling, or direct marketing without express consent. We do not sell personal data to third parties.

5. Data Sharing

Personal data is shared only in the following limited circumstances:

• With the Department of Intellectual Property (DIP) or other Thai government bodies, where required to process a trademark or copyright filing
• With third-party agents (such as foreign IP agents for Madrid Protocol filings), strictly for the purpose of the engagement and under confidentiality terms
• With analytics service providers (such as Google Analytics), where analytics consent has been given, and subject to data processing agreements
• With professional advisers (accountants, legal counsel) where required to manage the practice's operations, subject to confidentiality
• Where required by Thai law, court order, or competent authority

6. Data Retention

Contact form enquiries that do not result in an engagement are retained for twelve months, after which they are deleted. Data relating to completed client engagements is retained for seven years following the close of the matter, in accordance with professional record-keeping requirements. Analytics data collected under cookie consent is retained for a maximum of twenty-six months.

7. Data Protection Measures

• Website communications are protected by TLS encryption (HTTPS)
• Access to client data is restricted to personnel directly involved in the relevant matter
• Internal records are stored on password-protected systems with access logging
• In the event of a data breach likely to affect data subjects' rights, affected individuals will be notified within 72 hours of the breach coming to our attention, in accordance with PDPA requirements

8. Cookies

This website uses cookies for essential functionality and, where consent is given, for analytics. Essential cookies are required for the site to operate correctly. Analytics and preference cookies are optional and set only after you accept them through the cookie consent notice.

For full details, see our Cookie Policy.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to personal data we hold about you:

• Right to access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of personal data, subject to legal retention obligations
• Right to restriction — to request that we limit processing in certain circumstances
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time, for processing based on your consent, without affecting prior processing
• Right to lodge a complaint — with the Personal Data Protection Committee (PDPC), the Thai supervisory authority

To exercise these rights, contact: [email protected]. We will respond within thirty days.

10. Third-Party Links

This website may contain links to external resources, including DIP online services and WIPO databases. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site before providing personal data.

11. Children's Privacy

Services provided by Thapthim are directed to businesses and individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, contact us at [email protected] so that we may delete it.

12. Changes to This Policy

If this Privacy Policy is updated in a material way, we will revise the "Last Updated" date shown at the top of this page. Continued use of this website following a material change constitutes acceptance of the updated policy. We recommend reviewing this page periodically.