Privacy Policy
Siam Legal Alliance | บริษัท หริส แอนด์ แอสโซซิเอสท์ จำกัด | Last updated: April 2026
1. Introduction
Siam Legal Alliance (“we”, “us”, or “the Company”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website siamlegalalliance.com or engage our legal consultation services.
This policy is prepared in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data controller
Company บริษัท หริส แอนด์ แอสโซซิเอสท์ จำกัด
Tax ID 0835557001304
Address 20/6 Boat Lagoon, Tower C, Moo 2, Ko Kaeo, Mueang, Phuket 83000, Thailand
Email [email protected]
Tel +66 (02) 8255 8100
3. Personal data we collect
| Category | Data collected | Source |
|---|---|---|
| Identity | Full name, nationality, passport / ID number | Provided by you |
| Contact | Email address, phone / WhatsApp number | Provided by you |
| Property | Project name, property type, unit number, location | Provided by you |
| Documents | Reservation agreement, payment receipts, supporting documents | Uploaded by you |
| Payment | Transaction reference (no card data stored) | Stripe Payment Gateway |
| Technical | IP address, browser type, cookies | Automatically collected |
4. How we use your data
- To provide legal consultation and property transaction services
- To process payments via Stripe Payment Gateway
- To communicate with you regarding your case
- To comply with legal and regulatory obligations under Thai law
- To send service-related notifications (not marketing)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Legal basis for processing
| Purpose | Legal basis |
|---|---|
| Providing legal services | Contractual necessity |
| Payment processing | Contractual necessity |
| PDPA consent at registration | Consent |
| Compliance with Thai law | Legal obligation |
| Fraud prevention | Legitimate interest |
6. Data retention
| Data type | Retention period |
|---|---|
| Completed order records & legal documents | 5 years after service completion |
| Inactive member accounts | 12 months of inactivity |
| Pending / failed orders | 30 days |
| Payment transaction data (Stripe) | 90 days |
| Website cookies | As per cookie settings (max 12 months) |
7. Data sharing
Your data may be shared with the following parties only as necessary to deliver our services:
- Qualified lawyers in our network handling your case
- Stripe Inc. for secure payment processing
- Land Department of Thailand as required by law
- Government authorities when required by Thai law
All third parties are required to handle your data securely and in compliance with applicable law.
8. International data transfers
As we serve foreign buyers, your data may be processed by service providers outside Thailand (e.g. Stripe in the United States). Such transfers are carried out under appropriate safeguards including standard contractual clauses or adequacy decisions where applicable under GDPR.
9. Your rights
Under PDPA (and GDPR where applicable), you have the right to:
- Access — request a copy of your personal data we hold
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Restriction — request we limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, contact us at: [email protected]
10. Cookies
Our website uses cookies to ensure functionality and improve your experience. Essential cookies are required for the site to operate. You may manage non-essential cookies through your browser settings.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment data is processed exclusively by Stripe using TLS encryption — we do not store card details on our servers.
12. Changes to this policy
We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated date. We encourage you to review this page periodically.
13. Contact and complaints
If you have any questions or concerns about this Privacy Policy or the way we handle your data, please contact us:
Email [email protected]
Tel +66 (02) 8255 8100
Address 20/6 Boat Lagoon, Tower C, Moo 2, Ko Kaeo, Mueang, Phuket 83000
If you are an EU resident and believe your data has been processed unlawfully, you have the right to lodge a complaint with your local Data Protection Authority.