Privacy Policy

1. Introduction

Sage Keystone ("we," "us," or "our") is committed to protecting the privacy of individuals who interact with our services. This policy explains how we collect, use, store, and protect personal data in connection with our legal services and website operations. It applies to all personal information gathered through our website, contact forms, email communications, and in-person consultations.

If you have questions about this policy, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal data is Sage Keystone, located at 14/7 Sukhumvit Soi 33, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. For data protection inquiries, you may reach us at [email protected] or by calling +66 2 662 3841.

3. Data We Collect

We may collect the following types of personal information:

Information you provide directly: Your name, email address, phone number, and any details you share through our contact form or during consultations.

Information collected through our website: Browser type, IP address, pages visited, and the date and time of your visit, gathered through cookies and analytics tools.

Information related to legal services: Documentation, correspondence, and other materials relevant to the legal matter for which you have engaged us.

4. Legal Basis for Processing

We process personal data on the following grounds under the Thailand Personal Data Protection Act (PDPA):

Consent: Where you have given us permission, such as through our contact form or cookie preferences.

Contractual necessity: Where processing is required to perform the legal services you have engaged us for.

Legitimate interest: Where processing is necessary for our legitimate business operations, provided it does not override your rights.

Legal obligation: Where we are required by law to process certain data.

5. How We Use Your Data

We use personal data for the following purposes: to provide legal services as agreed with you; to respond to inquiries submitted through our contact form or by email; to improve our website functionality and user experience through analytics; to comply with Thai legal and regulatory obligations; and to communicate with you about your engagement or our services, where you have opted in to receive such communications.

6. Data Sharing

We do not sell or rent personal data to third parties. We may share data in the following circumstances: with courts or regulatory bodies where required by law or legal proceedings; with trusted service providers who assist our operations (such as IT support or cloud storage providers), under binding data processing agreements; and where you have given your explicit consent.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form inquiries are retained for up to 12 months. Legal engagement records are retained for a period of 10 years following the conclusion of the engagement, in accordance with Thai professional practice standards. Website analytics data is retained for up to 26 months.

8. Data Protection Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data storage, access controls limiting data to authorized personnel only, secure communication channels for sensitive correspondence, and regular reviews of our security practices.

9. Cookies

Our website uses cookies to improve functionality and analyze usage patterns. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

10. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request that inaccurate or incomplete data be corrected.

Right to erasure: You may request the deletion of your personal data, subject to legal retention requirements.

Right to data portability: You may request your data in a structured, commonly used format.

Right to object: You may object to the processing of your data on certain grounds.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Information

For any questions, concerns, or requests related to this privacy policy or our data handling practices:

Email: [email protected]

Phone: +66 2 662 3841

Address: Sage Keystone, 14/7 Sukhumvit Soi 33, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand