Privacy Policy

1. Introduction

Pravik ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy describes how we collect, use, store, and protect personal data provided to us through our website and professional engagements.

This policy applies to all individuals who interact with Pravik, including prospective clients, existing clients, and website visitors. By using our website or engaging our services, you acknowledge that you have read and understood this policy.

For questions regarding this policy or your personal data, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described below. The categories of data we may collect include:

• Full name and professional title
• Email address and telephone number
• Postal address or business address
• Information provided through our website contact form (including message content)
• Communication records (emails, meeting notes) related to an engagement
• Usage data collected automatically via cookies and analytics tools (see Section 5)
• Any documents or information voluntarily submitted during a professional engagement

We do not collect sensitive personal data (such as health, financial account, or biometric information) through our website. Such information may be discussed in the course of a legal engagement, in which case separate confidentiality arrangements apply.

3. How Data Is Collected

Personal data is collected through the following means:

• Website contact and enquiry forms
• Direct communication by email, phone, or in person
• Automatic collection via cookies and website analytics (with your consent)
• Professional correspondence and documentation during engagements
• Referrals from third parties, where relevant and lawful

4. Legal Basis for Processing

We process personal data on the following legal bases, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent — where you have provided explicit consent (e.g., subscribing to communications or accepting cookies)
• Contractual necessity — where processing is required to fulfill a professional engagement you have entered into with us
• Legitimate interests — where we have a lawful business purpose that does not override your rights and freedoms
• Legal obligation — where we are required to process or retain data under applicable law

5. Cookies and Tracking Technologies

Our website uses cookies to understand how visitors interact with our content and to improve the experience for future visitors. We use the following categories of cookies:

• Essential cookies — necessary for the website to function correctly; these cannot be disabled
• Analytics cookies — collect aggregated, anonymous data about page visits and navigation patterns
• Marketing cookies — used to understand which channels or content are most relevant to visitors
• Preference cookies — remember choices such as language or regional settings

You can manage your cookie preferences at any time through our Cookie Policy page, which includes functional controls for each category.

6. How We Use Your Data

Personal data is used solely for the following purposes:

• Responding to enquiries submitted through our website or by direct contact
• Providing and managing legal services for clients under an engagement
• Communicating with clients about matters relevant to their engagement
• Improving the quality and accessibility of our website
• Complying with our legal and regulatory obligations
• Sending service-related communications (not marketing) when necessary

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling in ways that produce legal or significant effects on individuals.

7. Data Sharing and Third Parties

We share personal data only where necessary and with appropriate safeguards in place. Recipients may include:

• Regulatory bodies or government agencies (e.g., Department of Intellectual Property, Ministry of Labour) as required by the nature of your engagement
• Courts, tribunals, or mediating authorities in the context of dispute resolution matters
• Technology service providers who support our website and internal operations (e.g., analytics platforms, hosting providers), under data processing agreements
• External advisors or collaborating legal professionals, where relevant to your matter and agreed with you

All third-party recipients are required to handle personal data lawfully and with appropriate security measures.

8. Data Protection and Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. These include:

• Encrypted data transmission (TLS/HTTPS) for all website communications
• Access controls limiting data to authorized personnel only
• Secure storage of client files and correspondence
• Regular review of data handling procedures

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable law.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Typical retention periods include:

• Website enquiry data: up to 12 months from the date of submission, unless an engagement begins
• Client engagement records: up to 7 years following the conclusion of the engagement, consistent with standard legal and regulatory obligations in Thailand
• Cookie and analytics data: as specified in each tool's retention settings, typically 13 months

After the applicable retention period, personal data is securely deleted or anonymized.

10. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right to access — request confirmation of whether we hold your data and obtain a copy
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of data where it is no longer necessary, subject to our legal obligations
• Right to restriction — request that we limit processing under certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format where technically feasible
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — contact the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that personal data has been submitted by a person under 18, we will take steps to delete it promptly.

12. Third-Party Links

Our website may contain links to external websites or resources. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

13. International Data Transfers

In limited circumstances, personal data may be processed or stored by service providers outside Thailand (for example, cloud hosting or analytics platforms). Where this occurs, we ensure that appropriate safeguards are in place, consistent with the requirements of the Thai PDPA and applicable cross-border transfer provisions.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When changes are made, the revised policy will be published on this page with an updated "Last Updated" date. Continued use of our website following any changes constitutes acceptance of the revised policy.

We encourage you to review this policy periodically.

15. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

• Email: [email protected]
• Address: 518 Ploenchit Tower, Ploenchit Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand
• Phone: +66 2 656 8314