Privacy Policy
Last Updated: 14 April 2025
Mali Legal ("we", "us", "our") is committed to handling personal information responsibly and in compliance with the Personal Data Protection Act B.E. 2562 (Thailand's PDPA) and other applicable laws. This policy describes what information we collect, how we use it, and what rights you have in relation to it. It applies to information collected through this website and in connection with our legal services.
1. Data We Collect
When you use the contact form on this website, we collect the information you provide: your name, email address, and optionally your telephone number and a brief message. We do not collect any information beyond what you voluntarily submit.
This website also uses cookies to understand how visitors interact with it and to remember cookie consent preferences. See our Cookie Policy for details.
If you become a client and we provide legal services, we collect the personal information necessary to carry out that work — which may include identity documents, financial information, and other matter-specific data. This is collected and handled separately under our professional confidentiality obligations.
2. Legal Basis for Processing
We process contact form data on the basis of consent — you voluntarily provide the information and submit the form.
Where we proceed to provide legal services, data processing is based on contractual necessity — we need the information to perform the services agreed.
We may also process data on the basis of legitimate interest — for example, to improve how this website functions or to maintain records required by professional regulations.
3. How We Use Your Information
- To respond to enquiries submitted through the contact form
- To deliver legal services where engaged to do so
- To comply with professional and legal obligations applicable to legal practitioners in Thailand
- To maintain records required by the Thai Bar Association and applicable regulations
- To understand how our website is used and to improve it
We do not use your information for marketing communications without your specific consent. We do not sell, rent, or trade personal data.
4. Data Sharing
We do not share your personal information with third parties except in the following circumstances:
- Where required by law or by a regulatory body with authority over our practice
- Where necessary to provide legal services — for example, sharing documents with a court or a counterparty's legal representative
- With service providers who assist in operating this website (such as hosting), under confidentiality obligations
- With your explicit consent
5. Data Retention
Contact form submissions that do not proceed to a client engagement are retained for up to six months and then deleted.
Records relating to completed legal matters are retained for a minimum of seven years following conclusion of the matter, in line with professional obligations and applicable limitation periods under Thai law.
Cookie preference records are retained until you clear your browser's local storage or update your preferences.
6. Data Protection Measures
Physical client files are stored in locked cabinets accessible only to staff working on the relevant matter. Digital documents are handled through encrypted channels. Our website is served over HTTPS.
In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.
7. Cookies
This website uses cookies for basic functionality and to understand visitor behaviour. You can manage your cookie preferences at any time. See our Cookie Policy for full details of the cookies used and how to control them.
8. Your Rights Under Thai PDPA
Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of data, subject to our legal retention obligations
- Right to data portability — to receive data in a structured, commonly used format
- Right to object — to object to processing carried out on the basis of legitimate interest
- Right to withdraw consent — to withdraw any consent given, without affecting prior lawful processing
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
9. Third-Party Links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies before providing personal information.
10. Children's Privacy
This website and our services are directed at persons 18 years of age and older. We do not knowingly collect personal data from anyone under 18.
11. Changes to This Policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of this website following an update constitutes acceptance of the revised policy.
Data Protection Contact
For any questions or requests relating to this policy or your personal data, please contact us:
- [email protected]
- Mali Legal, 234/8 Petchkasem Road, Hua Hin, Prachuap Khiri Khan 77110, Thailand
- +66 96 451 8723