Privacy Policy

1. Who We Are

Baan Counsel is a legal advisory firm registered in Thailand, with its principal office at 518 Sukhumvit Road, Soi 33, Watthana, Bangkok 10110. We provide immigration consultation and work permit advisory services to individuals and businesses operating in Thailand.

For the purposes of this Privacy Policy, Baan Counsel acts as the data controller for personal information collected through our website at baan-counsel.biz and through our professional advisory engagements.

You may reach our office directly at +66 2 391 7248 or by email at [email protected].

2. Data We Collect

We collect personal information only when it is reasonably necessary for the purpose for which it is requested. The categories of information we may hold include:

• Identity information — full name, nationality, date of birth, passport or identification document details
• Contact information — email address, telephone number, postal address
• Immigration and work status information — current visa category, visa history, employment details, employer name and registration number
• Financial and tax records — income documentation submitted in support of Permanent Residency applications only, where applicable
• Communication records — correspondence submitted through our website contact form or directly by email
• Technical data — IP address, browser type, device type, and session data collected automatically when you visit our website
• Preference data — cookie consent selections and communication preferences you have indicated

We do not collect special categories of sensitive data (such as health data, biometric data, or religious affiliation) unless you volunteer it in the course of a specific service engagement and it is necessary for that engagement.

3. How We Use Your Information

We use the personal information we hold for the following purposes:

• To respond to enquiries submitted through our website or by telephone
• To assess eligibility and provide advisory opinions on visa, work permit, or residency options
• To prepare, compile, and submit application documents on your behalf where engaged to do so
• To liaise with Thai government bodies — including the Immigration Bureau, Ministry of Labour, and Department of Business Development — in connection with your case
• To send service-related communications, including appointment confirmations, document requests, and status updates
• To comply with applicable legal obligations and professional regulatory requirements
• To improve the performance and usability of our website using aggregated, anonymised analytics data

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process personal information on the following grounds:

• Contractual necessity — where processing is required to provide the services you have engaged us to deliver
• Legitimate interests — for website operation, security, and service improvement, where those interests are not overridden by your rights
• Consent — for optional cookies and marketing communications, which you may withdraw at any time
• Legal obligation — where processing is required to comply with Thai law or professional obligations

5. Data Sharing

We do not sell, rent, or trade personal information. We share your data only in the following circumstances:

• Government authorities — the Thai Immigration Bureau, Ministry of Labour, Department of Business Development, or other relevant agencies, in connection with applications we are submitting on your behalf
• Service providers — third parties who assist with website hosting, analytics, or email delivery, bound by appropriate data processing agreements
• Professional advisors — legal or accounting advisors engaged on a confidential basis where your matter requires their involvement
• Legal requirements — where disclosure is required by Thai law, court order, or regulatory authority

Any third party receiving your data is required to handle it in accordance with applicable privacy standards and may not use it for their own purposes.

6. Retention Periods

We retain personal information for as long as is necessary for the purposes set out in this policy, and to comply with our legal obligations.

• Enquiry records — up to 12 months from the date of the enquiry if no engagement follows
• Active client files — for the duration of the engagement, plus 7 years following its conclusion, in line with Thai professional record-keeping requirements
• Website technical data — up to 26 months in anonymised or aggregated form
• Marketing consent records — until consent is withdrawn, plus a short retention period for compliance evidence

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Rectification — ask us to correct inaccurate or incomplete information
• Erasure — request deletion of your personal information, subject to our legal obligations
• Restriction — ask us to limit how we use your information in certain circumstances
• Portability — receive your data in a structured, commonly used format where technically feasible
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting prior processing

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days. There is no charge for reasonable requests.

8. Cookies

Our website uses cookies and similar technologies. A full explanation of the cookies we use, their purpose, and how to manage your preferences is set out in our separate Cookie Policy.

You can adjust or withdraw your cookie preferences at any time by clicking the "Cookie Settings" option available on our website.

9. Security

We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and periodic review of our security practices.

While we take these precautions carefully, no method of transmission over the internet can be considered entirely without risk. If you have reason to believe the security of your information has been compromised, please notify us promptly.

10. International Data Transfers

Our services are based in Thailand and our data is primarily processed within Thailand. Where we use third-party service providers located outside Thailand — for example, cloud hosting or email platforms — we take steps to ensure appropriate safeguards are in place, consistent with the Thailand Personal Data Protection Act (PDPA) and applicable international standards.

11. Children

Our website and services are directed at adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have received information from a minor without appropriate parental or guardian consent, we will take steps to delete it promptly. If you believe a minor has submitted information to us, please contact us so we can address the matter.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The "Last updated" date at the top of this page indicates when the most recent revision was made.

For material changes, we will make reasonable efforts to notify affected individuals. Continued use of our website or services following any update constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern about how your information has been handled, please contact us:

We aim to respond to all privacy-related enquiries within 30 days.