Privacy Policy

1. Introduction

Krung Shield ("we", "us", "our") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and other applicable data protection legislation. This Privacy Policy explains what personal data we collect, how it is used, how it is protected, and the rights available to individuals whose data we hold.

This policy applies to personal data collected through our website at krunggen.info, through our contact form, and in the course of delivering legal services. It does not cover third-party websites linked from our site.

For data-related enquiries, contact us at: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, initials
• Contact data: email address, telephone number, postal address
• Communication data: messages sent to us through the contact form or by email
• Technical data: IP address, browser type, device information, pages visited (via analytics cookies where consent has been given)
• Service data: information you provide in the course of engaging our legal services

We do not collect sensitive personal data (such as health information, political views, or biometric data) unless it is directly necessary to deliver a service you have specifically requested.

3. How We Collect Data

• When you submit a contact or enquiry form on our website
• When you contact us by email or telephone
• In the course of delivering legal services to you
• Automatically via cookies and analytics tools where you have given consent

4. How We Use Your Data

Your personal data is used for the following purposes:

• To respond to enquiries and provide the legal services you have requested
• To communicate with you during and after a service engagement
• To maintain records as required by Thai professional and regulatory obligations
• To improve the functionality and usability of our website (analytics, with consent)
• To comply with applicable law and regulatory requirements

Legal basis for processing: We process personal data on the basis of (a) your consent, (b) the performance of a contract or pre-contractual steps, (c) our legitimate interests in operating and improving our services, or (d) compliance with a legal obligation, as applicable to each specific use.

5. Data Sharing

We do not sell or rent personal data to third parties. Data may be shared only in the following circumstances:

• With government bodies (such as the Department of Intellectual Property) where necessary to deliver a service you have engaged us for
• With service providers acting as data processors on our behalf (e.g., secure hosting providers), who are contractually bound to handle data in accordance with this policy
• Where we are required to do so by law, court order, or regulatory authority
• With your explicit consent for any other purpose

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this policy and to meet our legal and regulatory obligations. In practice:

• Contact enquiries not resulting in a service engagement: 12 months
• Data relating to completed service engagements: 7 years from completion, in accordance with Thai legal record-keeping standards
• Analytics data: as per cookie consent settings (typically 26 months)

After the applicable retention period, data is securely deleted or anonymised.

7. Data Protection Measures

• Encrypted storage and transmission of personal data
• Access to personal data restricted to authorised personnel only
• Regular review of data handling practices and access controls
• Procedures in place for identifying and responding to data breaches
• Staff awareness of data protection obligations

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function and are placed automatically. Analytics, marketing, and preference cookies are only placed with your consent. For full details of the cookies we use and how to manage your preferences, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe data relating to a minor has been submitted to us, please contact us so that we can delete it.

11. Your Rights

Under Thai data protection law (PDPA), you have the following rights in relation to your personal data:

• Right to access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: at any time, where processing is based on consent
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The date at the top of this page indicates when the policy was last revised. Continued use of our website or services following an update constitutes acceptance of the revised policy.

13. Contact

For any questions about this Privacy Policy or the handling of your personal data, please contact: