Privacy Policy

1. Introduction

Tara Partners ("we," "our," or "the firm") is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients and website visitors. This Privacy Policy explains our practices regarding the collection, use, storage, and disclosure of personal data in accordance with Thai data protection laws, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

This policy applies to information collected through our website, client engagement processes, and professional services delivery. By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Information You Provide

We collect personal information that you voluntarily provide when:

• Submitting inquiry forms on our website (name, email address, phone number, message content)
• Engaging our legal services (identification documents, business information, regulatory documents)
• Communicating with us via email, telephone, or in-person meetings
• Subscribing to our communications or updates

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, referring URLs)
• Cookie and tracking technology data (see our Cookie Policy for details)

3.3 Information from Third Parties

We may receive information about you from regulatory agencies, professional referral sources, or publicly available databases in connection with providing legal services, subject to applicable legal and ethical requirements.

4. Legal Basis and Purpose of Processing

We process personal data based on the following legal grounds under the PDPA:

4.1 Contract Performance

Processing necessary to provide legal advisory services under engagement agreements, including regulatory submission preparation, agency coordination, and client representation.

4.2 Legal Obligations

Processing required to comply with professional conduct rules, attorney-client privilege requirements, conflict checking obligations, and anti-money laundering regulations.

4.3 Legitimate Interests

Processing for our legitimate business interests, including:

• Responding to inquiries and providing information about our services
• Maintaining client relationship management systems
• Improving our website and services
• Protecting against fraud and security threats

4.4 Consent

Where required by law or where we seek your consent for specific processing activities such as marketing communications or use of certain cookies.

5. How We Use Your Information

Personal information is used for the following purposes:

• Providing legal advisory services and regulatory compliance counsel
• Communicating about engagements, submissions, and regulatory developments
• Conducting conflict checks and maintaining professional compliance
• Processing payments and maintaining financial records
• Responding to inquiries and scheduling consultations
• Sending service-related communications and updates
• Improving our website functionality and user experience
• Complying with legal and regulatory obligations

6. Data Sharing and Disclosure

6.1 Service Providers

We may share information with third-party service providers who assist in:

• Website hosting and technical infrastructure
• Document management and secure file storage
• Translation services for regulatory documents
• Professional liability insurance providers

All service providers are contractually obligated to maintain confidentiality and use data only for specified purposes.

6.2 Regulatory Agencies

Client information is shared with Thai regulatory agencies (Thai FDA, SEC, procurement authorities) only as necessary to provide legal services and with client authorization.

6.3 Legal Requirements

We may disclose information when required by law, court order, legal process, or to protect the rights, property, or safety of the firm, clients, or others.

6.4 Professional Advisors

Information may be shared with our professional advisors (accountants, insurers, legal counsel) under confidentiality obligations for business management purposes.

7. Data Retention

We retain personal information for the following periods:

• Client engagement data: 10 years after completion of services (in accordance with Thai Bar Association record-keeping requirements)
• Inquiry and contact data: 3 years from last contact
• Website usage data: Up to 24 months
• Financial records: 7 years as required by Thai tax law

Data is securely deleted or anonymized after retention periods expire unless longer retention is required by law or necessary for legal proceedings.

8. Data Security

We implement appropriate technical and organizational measures to protect personal information:

• Encryption of data in transit and at rest
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel
• Confidentiality agreements with all staff members
• Regular security audits and vulnerability assessments
• Secure physical premises with controlled access

While we employ industry-standard security measures, no method of transmission or storage is completely secure. We encourage clients to maintain security of credentials and to contact us immediately if they suspect unauthorized access.

9. Your Rights Under Thai Law

Under the PDPA, you have the following rights regarding your personal data:

9.1 Right of Access

Request confirmation of whether we process your data and obtain a copy of such data.

9.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure

Request deletion of your data where there is no legal basis for continued processing (subject to professional record-keeping obligations).

9.4 Right to Data Portability

Receive your data in a structured, commonly used format for transfer to another controller.

9.5 Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

9.6 Right to Restrict Processing

Request restriction of processing in certain circumstances.

To exercise these rights, contact us at privacy@tarapartnersad. We will respond within the timeframe required by law (typically 30 days). Note that certain rights may be limited by professional obligations including attorney-client privilege and legal record-keeping requirements.

10. Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about the types of cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

11. International Data Transfers

Personal data is primarily processed and stored within Thailand. If data transfers outside Thailand become necessary for service provision, we will ensure appropriate safeguards are in place as required by the PDPA, such as standard contractual clauses or other approved transfer mechanisms.

12. Children's Privacy

Our services are not directed to individuals under 20 years of age (the age of majority in Thailand). We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor without proper parental consent, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email to clients or through prominent notice on our website. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Complaints and Regulatory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, please contact us at privacy@tarapartnersad. We will investigate and respond to your concern.

You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand regarding our data processing practices.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: