Privacy Policy

Boon Counsel ("we," "our," or "us") operates from 88/12 Sathorn Road, Silom, Bangkok 10500, Thailand, and provides pension legal advisory services. This Privacy Policy describes how we collect, use, store, and protect personal information in connection with our website and services.

We approach data handling with the same care we bring to legal work: methodically, transparently, and with clear regard for the interests of those whose information we hold. We do not collect more than is necessary, we do not share information without cause, and we keep what we hold only for as long as it is needed.

By using our website or engaging our services, you acknowledge that you have read and understood the terms set out in this policy. Questions or requests regarding this policy should be directed to [email protected].

We collect personal information in two principal ways: information you provide to us directly, and information gathered automatically during your use of our website.

2.1 Information You Provide

• Name and contact details — submitted via our enquiry form, including full name, email address, and telephone number.
• Matter details — information relating to your pension situation, employment history, or prior correspondence with pension authorities, provided during initial intake or consultation.
• Correspondence — any communications sent to us by email or through the website.

2.2 Information Collected Automatically

• Usage data — pages visited, time spent on each page, referring URLs, and browser type, collected via analytics tools (Google Analytics 4).
• Device information — IP address, device type, operating system, and screen resolution.
• Cookie data — as described in our Cookie Policy.

2.3 Legal Basis for Processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, internationally recognised frameworks:

• Consent — for analytics and marketing cookies, and where you have opted in to receive communications.
• Contract — to fulfil our obligations when you engage our legal services.
• Legitimate interest — for website security, fraud prevention, and service improvement.
• Legal obligation — where required to comply with applicable law or regulatory direction.

2.4 Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected:

• Enquiry data — 12 months from last contact, unless a client relationship is formed.
• Client matter files — 7 years from the conclusion of the matter, in accordance with professional obligations.
• Analytics data — up to 14 months, consistent with Google Analytics retention settings.
• Cookie consent records — 12 months from the date of consent.

Information collected is used for the following purposes:

• Responding to enquiries — to contact you following submission of our enquiry form and discuss your situation.
• Service delivery — to conduct pension entitlement reviews, prepare cross-border claims, and represent clients in formal appeals.
• Communications — to send matter updates, request further documentation, and correspond on progress.
• Analytics and improvement — to understand how visitors use our website and identify areas for improvement.
• Legal compliance — to meet our obligations under Thai law, including professional conduct rules applicable to legal practitioners.

3.1 Third-Party Sharing

We do not sell personal information. We may share data with the following categories of third parties, strictly as necessary:

• Analytics providers — Google Analytics 4 (subject to Google's privacy terms).
• Advertising platforms — Meta (Facebook Pixel) and Microsoft (Bing) where analytics or remarketing is in use.
• Pension authorities — relevant Thai and foreign bodies, only where instructed by the client in connection with their matter.
• Professional advisors — translation partners or correspondence agents engaged to assist with cross-border matters, bound by confidentiality.

We take appropriate organisational and technical measures to protect personal information from unauthorised access, disclosure, alteration, or loss:

• Secure (HTTPS/TLS) transmission of data between your browser and our web servers.
• Access to client files restricted to fee earners and support staff directly involved in each matter.
• Physical document storage in secure, access-controlled premises at our Bangkok office.
• Regular review of system access and security practices.

In the event of a personal data breach that is likely to affect your rights, we will notify affected individuals and, where required, the relevant supervisory authority, within the timeframe prescribed by applicable law.

Our website uses cookies for essential functionality, analytics, and where consent is given, advertising purposes. We use the following categories:

• Essential cookies — required for the site to function correctly, including cookie consent preference storage.
• Analytics cookies — Google Analytics 4, used to understand site usage in aggregate.
• Marketing cookies — Meta Pixel and Bing, activated only with your consent.

You may manage your cookie preferences at any time through our Cookie Policy page.

Under Thailand's PDPA and applicable data protection frameworks, you have the following rights in relation to your personal data:

• Right of access — to request a copy of personal data we hold about you.
• Right to rectification — to have inaccurate data corrected without undue delay.
• Right to erasure — to request deletion of data we are not required by law or professional obligation to retain.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing carried out on the basis of legitimate interest or for direct marketing.
• Right to withdraw consent — to withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing.
• Right to lodge a complaint — with the Office of the Personal Data Protection Commission (PDPC) of Thailand if you believe your data has been handled unlawfully.

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 30 days. Where a request is complex or numerous, we may extend this period and will notify you accordingly.

Our website may contain links to external resources — pension authority websites, government portals, or professional body directories. These are provided for reference only. We are not responsible for the privacy practices or content of those external sites and encourage you to review their respective privacy notices before submitting personal information.

Our services are directed at adults of 18 years of age and above. We do not knowingly collect personal data from individuals under the age of 18. If you become aware that a minor has submitted personal information through our website without appropriate consent, please contact us promptly and we will arrange for that data to be removed.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Where changes are material, we will update the "Last Updated" date at the top of this page and, where appropriate, draw attention to the change through a notice on our homepage.

Continued use of our website following any update constitutes your acknowledgment of the revised policy.