Privacy Policy

1. Introduction

veritasasa ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our legal services.

This policy applies to information we collect through our website, during consultations, and throughout our service delivery. By using our services or website, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Submit inquiries through our contact form
• Engage our legal services
• Subscribe to communications from us
• Participate in consultations or advisory sessions

The personal information we collect may include: name, email address, phone number, business name, job title, business address, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing actions, including: IP address, browser type, operating system, access times, pages viewed, and referring website addresses.

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about our cookie practices, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide legal services and respond to your inquiries
• To communicate with you about our services, including appointment scheduling and updates
• To process and manage client engagements
• To comply with legal and professional obligations
• To maintain and improve our website and services
• To send marketing communications (with your consent)
• To analyze website usage and optimize user experience
• To protect against fraud and unauthorized access

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to perform our legal services contract with you
• Consent: Where you have provided explicit consent for specific processing activities
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving our services
• Legal Obligation: Where processing is required to comply with legal or regulatory requirements

5. Information Sharing and Disclosure

5.1 Service Providers

We may share your information with third-party service providers who assist us in operating our website, conducting our business, or providing services to you. These providers include: website hosting providers, email service providers, analytics services, and document management systems. All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information when required by law, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure socket layer (SSL) encryption for data transmission
• Restricted access to personal information on a need-to-know basis
• Regular security assessments and updates
• Secure document management systems with access controls
• Attorney-client privilege protection for all client communications

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Client files and engagement documents: 7 years after completion of services (in accordance with professional regulations)
• Marketing communications data: Until you withdraw consent or request deletion
• Website analytics data: 24 months
• Inquiry forms (non-clients): 2 years from last contact

8. Your Privacy Rights

Under applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA), you have the following rights:

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal and professional obligations)
• Right to Restrict Processing: Request limitation of how we use your information
• Right to Data Portability: Receive your information in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Commission of Thailand

To exercise any of these rights, please contact us at [email protected].

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

While we primarily operate in Thailand, some of our service providers may be located in other countries. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: