Legal
Privacy Policy
Mali Advocates takes the privacy of every person who contacts us very seriously. This policy explains plainly what information we collect, why we hold it, and how you can ask us to act on it.
Last Updated: May 2025 | Data Controller: Mali Advocates | Jurisdiction: Kingdom of Thailand
01 Introduction & Scope
Mali Advocates ("we", "us", "our") is a legal services firm registered and operating in Bangkok, Thailand. Our registered office is at 91 Asok Montri Road, Watthana, Bangkok 10110.
This Privacy Policy applies to all personal data we collect through our website, by telephone, by email, and in the course of providing our services. It covers anyone who contacts us, visits our website, or engages us for pension-related legal matters.
We act in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA), Thailand's primary personal data protection legislation. Where clients or contacts are based in jurisdictions with additional requirements, we apply those standards with equal care.
02 What Data We Collect
We collect only the information that is necessary for us to assist you. This includes:
Contact & Identification Data
Your name, telephone number, email address, and, where relevant to your matter, your date of birth or national ID reference. This is collected when you submit an enquiry form, call us, or email us directly.
Case & Matter Data
Pension documents, correspondence with pension funds or government bodies, employment history, and other materials you share with us when we are engaged to act on your behalf. This information is used solely to conduct your matter.
Website Usage Data
Anonymised analytics data, including pages visited, approximate geographic location, device type, and session duration. This data cannot identify you personally and is used only to improve our website.
Legal Basis for Processing
- Contract performance — processing necessary to provide the services you have requested.
- Legitimate interests — responding to enquiries and improving our services.
- Consent — where you have explicitly agreed, for example to receive updates from us.
- Legal obligation — where required by Thai law or professional regulatory requirements.
Retention: Contact enquiry data is retained for up to 2 years. Client matter files are retained for 7 years following the conclusion of a matter, in line with professional obligations.
03 How We Use Your Data
We use personal data only for the purposes for which it was collected or for closely related purposes you would reasonably expect. These include:
- Responding to your initial enquiry and assessing whether we are able to help.
- Providing pension review, appeals, or ongoing case management services where you have engaged us.
- Communicating with you about your matter, including sending written updates and requesting documents we need.
- Meeting our legal and professional obligations, including anti-money-laundering identification requirements.
- Improving our website through anonymised analytics data.
We do not sell, rent, or trade your personal data to any third party for commercial purposes. We may share data with regulated third parties who assist us in delivering services (such as secure document storage providers), and we ensure any such arrangements include appropriate data protection obligations.
04 How We Protect Your Data
We apply appropriate technical and organisational measures to keep your personal data secure. These include:
Encrypted Transmission
All data sent to and from our website is encrypted using TLS/HTTPS.
Access Controls
Only advocates and authorised staff with a direct need can access client matter files.
Secure Storage
Physical and digital records are stored in secured environments with restricted access.
Breach Notification
In the unlikely event of a data breach affecting your rights, we will notify you and the relevant authority as required by the PDPA.
06 Your Rights
Under the PDPA and applicable data protection law, you have the following rights in relation to your personal data. We aim to respond to all requests within 30 days.
Right of Access
Right to Rectification
Right to Erasure
Right to Data Portability
Right to Object & Withdraw Consent
Right to Lodge a Complaint
To exercise any of these rights, please contact us at [email protected].
07 Third-Party Links
Our website may contain links to external resources — for example, government pension bodies or regulatory guidance. We are not responsible for the privacy practices of these external sites and recommend that you review their own policies before submitting any personal information to them.
08 Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.
09 Policy Updates
We review this Privacy Policy periodically and may update it to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will always reflect the most recent revision.
If we make significant changes that affect how we handle your data, we will take steps to notify you — for example, by placing a prominent notice on our website.
10 Contact & Data Enquiries
If you have any questions about this policy, would like to exercise your rights, or have a concern about how we have handled your data, please reach us through any of the following:
Mali Advocates — Data Controller
- Privacy enquiries: [email protected]
- +66 2 261 47 83
- 91 Asok Montri Road, Watthana, Bangkok 10110, Thailand
- Monday–Friday, 09:00–17:30 ICT