Privacy Policy

1. Introduction

Kheha ("we", "us", "our") is a family legal services practice based at 112 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand. We are committed to handling your personal information responsibly and transparently. This policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to data collected through our website at kheha.cyou, through our contact form, and through correspondence with us by telephone or email.

For questions about this policy, please contact us at [email protected].

2. Data We Collect

When you contact us through our website or by email or telephone, we may collect the following:

• Your name
• Your email address
• Your telephone number (if provided)
• The content of any message you send us
• Information relating to your family legal matter, which you share with us voluntarily

We also collect certain technical data automatically when you visit our website, including your IP address, browser type, pages visited, and approximate geographic location. This is collected through standard web analytics tools.

3. How and Why We Use Your Data

We use the data you provide to:

• Respond to your enquiry and arrange consultations
• Provide the legal services you have engaged us for
• Send you information related to your matter
• Comply with our legal and professional obligations as registered legal practitioners

We use technical analytics data to understand how our website is used and to improve it. We do not use this data for advertising purposes.

The legal basis for processing your data is, depending on the circumstance: your consent (for contact form submissions), performance of a contract or pre-contractual steps (for client engagements), and our legitimate interest in maintaining professional records and improving our services.

4. Data Retention

Enquiry data (from people who have not become clients) is retained for twelve months from the date of contact, after which it is securely deleted.

Client matter files are retained for a minimum of seven years following the conclusion of the matter, in accordance with professional practice standards applicable to legal practitioners in Thailand. After this period, files are securely destroyed.

5. Data Security

We store client data on encrypted systems with access restricted to authorised team members only. Physical files are kept in locked storage within our office. Electronic communications containing personal data are handled through secure channels. We review our security practices regularly and take reasonable steps to prevent unauthorised access, loss, or disclosure.

In the unlikely event of a data breach that affects your personal information in a material way, we will notify you without undue delay.

6. Confidentiality and Legal Professional Privilege

Information you share with us in the context of legal advice is subject to legal professional privilege. This is a protection recognised under Thai law and professional conduct rules. It means that we are legally prohibited from disclosing the contents of your legal consultations without your consent, except in very limited circumstances required by law.

7. Cookies

Our website uses cookies to support basic functionality and to collect anonymised analytics data. Please see our Cookie Policy for a full explanation of what cookies we use and how to manage your preferences.

8. Third Parties

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

• Overseas legal counsel when your matter requires coordination in another jurisdiction, where you have been informed and consented
• Courts or regulatory bodies where legally required
• Our website analytics provider (data is anonymised and aggregated)

9. Your Rights

Under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), which governs data privacy in Thailand, you have the following rights:

• Right to access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate data
• Right to erasure — in certain circumstances, you may request that we delete your data
• Right to restrict processing — you may ask us to pause processing while a dispute is resolved
• Right to data portability — where processing is based on consent or contract, you may request your data in a portable format
• Right to object — you may object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

If you believe we have not handled your data appropriately, you may raise a complaint with the Personal Data Protection Committee (PDPC) of Thailand, the relevant supervisory authority.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data directly from anyone under 18. If a matter involves a child, we handle any associated data with particular care and in line with our professional obligations.

11. Links to Other Websites

Our website may contain links to external resources. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

12. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.

13. Contact

For any questions, concerns, or requests relating to this Privacy Policy:

• Email: [email protected]
• Post: Kheha, 112 Rama IV Road, Khlong Toei, Bangkok 10110, Thailand
• Phone: +66 81 263 9475