Privacy Policy

1. Data Controller

The data controller for personal information processed through this website is:

Orchid Accord Co., Ltd.
73 Wireless Rorchiidend, Lumpini, Pathum Wan, Bangkok 10330, Thailand
Email: [email protected]
Tel: +66 2 681 4295

2. Information We Collect

We collect personal information you provide directly when you complete our contact form or communicate with us. This may include your name, email address, telephone number, and the content of your message. We also collect technical data automatically, such as your IP address, browser type, and pages visited, through website analytics tools.

We do not collect sensitive personal data, financial information, or data from minors without appropriate safeguards.

3. Legal Basis and Purpose

We process personal data on the following grounds under applicable Thai data protection law (PDPA, B.E. 2562) and, where relevant, the EU General Data Protection Regulation:

• Contract performance — to provide legal services you have engaged us to deliver.
• Legitimate interests — to respond to enquiries, improve our services, and maintain security.
• Consent — for optional communications such as legal updates and newsletters.
• Legal obligation — where we are required to retain or disclose records by law.

4. How We Use Your Information

We use your information to respond to your enquiries, deliver the services you have engaged, maintain our client records, comply with our professional and legal obligations, and improve the performance of our website. We do not use your information for automated decision-making or profiling that produces legal effects.

5. Data Sharing

We do not sell your personal data. We may share your information with third-party service providers who assist our operations — such as website hosting and analytics platforms — under appropriate data processing agreements. We may also disclose information where required by Thai law or a competent authority.

Analytics tools used on this website may include Google Analytics. Please refer to Google's privacy documentation for details of their data practices.

6. Data Retention

Enquiry data is retained for 24 months from your last contact with us, unless a client relationship exists, in which case records are retained for a minimum of 5 years from the end of the engagement in accordance with Thai legal professional obligations. Analytics data is retained for 26 months.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including encrypted transmission (TLS/HTTPS), access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law.

8. Cookies

We use cookies to support website functionality and to understand usage patterns. Full details of the cookies we use and how to manage your preferences are available in our Cookie Policy.

9. Your Rights

Under Thai PDPA and, where applicable, GDPR, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data where no legal basis remains.
• Right to restriction — request that we limit processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Supervisory Authority

If you are located in Thailand and have concerns about how we handle your personal data, you may contact the Personal Data Protection Committee (PDPC) at the Ministry of Digital Economy and Society. If you are located within the EU/EEA, you may contact your local data protection supervisory authority.

13. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be notified via a prominent notice on our website. Continued use of our website after changes become effective constitutes acceptance of the updated policy.