Privacy Policy
Last Updated: January 20, 2026
Introduction
Lex Croft is committed to protecting the privacy and confidentiality of personal data provided by clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable legal professional standards.
This policy applies to all personal data collected through our website, consultations, and legal service engagements. By using our services or providing personal information, you consent to the practices described in this policy.
Data Controller Information
The data controller responsible for your personal information is:
Lex Croft
59 Langsuan Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 652 7384
Personal Data We Collect
We collect personal data necessary to provide legal services and respond to inquiries. The types of information we collect include:
Contact Information
- Full name
- Email address
- Phone number
- Mailing address
Legal Matter Information
- Details about your legal matter or inquiry
- Documentation related to property transactions, business formation, or civil matters
- Financial information relevant to legal services (when necessary)
- Communication records and correspondence
Website Usage Data
- IP address and device information
- Browser type and version
- Pages visited and time spent on our website
- Referring website addresses
How We Collect Personal Data
We collect personal data through the following methods:
- Contact Forms: When you submit inquiries through our website contact form
- Email Communication: When you correspond with us via email
- Phone Consultations: During telephone conversations about legal matters
- In-Person Meetings: During consultations and meetings at our office
- Document Submissions: When you provide documents for legal review or representation
- Cookies and Analytics: Through website cookies and analytics tools (see our Cookie Policy)
Legal Basis for Processing
We process personal data based on the following legal grounds under the PDPA:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: To fulfill our legal service obligations under engagement agreements
- Legitimate Interest: For business operations, responding to inquiries, and improving our services
- Legal Obligation: To comply with Thai legal and regulatory requirements, including professional conduct standards
How We Use Personal Data
We use personal data for the following purposes:
- Providing legal services and advice related to property transactions, business formation, and civil matters
- Communicating about your legal matter and providing updates on case progress
- Responding to inquiries and scheduling consultations
- Preparing legal documents, contracts, and court filings
- Processing payments for legal services
- Maintaining records in accordance with legal and professional obligations
- Improving our website and services through analytics
- Sending relevant legal updates or service information (with consent)
- Complying with legal and regulatory requirements
Data Sharing and Disclosure
We maintain strict confidentiality of client information. We may share personal data only in the following limited circumstances:
With Your Consent
We will share information when you have provided explicit consent for such disclosure.
Service Providers
We may engage third-party service providers who assist with business operations, such as document storage, payment processing, or website hosting. These providers are bound by confidentiality agreements and process data only as instructed.
Legal Requirements
We may disclose personal data when required by law, court order, or regulatory authority, or to protect legal rights and interests.
Professional Obligations
In the course of legal representation, we may share information with courts, opposing parties, mediators, or other legal professionals as necessary to fulfill our professional obligations, always in accordance with attorney-client privilege protections.
Data Retention
We retain personal data for the following periods:
- Client Files: Retained for 7 years after conclusion of legal matter, in accordance with legal professional standards
- Financial Records: Retained for 7 years as required by Thai accounting regulations
- Inquiry Information: Retained for 2 years if no engagement proceeds
- Website Analytics: Retained for 2 years for service improvement purposes
Personal data is securely deleted or anonymized when no longer needed for its original purpose and retention period has expired.
Data Security Measures
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction:
- Secure document storage systems with encryption
- Access controls limiting data access to authorized personnel only
- Secure communication channels for sensitive information
- Regular security assessments and updates
- Employee training on data protection and confidentiality
- Backup systems to prevent data loss
- Physical security measures at our office location
Your Rights Under PDPA
Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:
- Right to Access: Request access to personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of personal data in certain circumstances
- Right to Data Portability: Receive personal data in a structured, commonly used format
- Right to Object: Object to processing of personal data for certain purposes
- Right to Restrict Processing: Request limitation of processing in certain situations
- Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
- Right to Lodge Complaint: File a complaint with the Personal Data Protection Committee if you believe your rights have been violated
To exercise these rights, please contact us at [email protected] or +66 2 652 7384. We will respond to your request within 30 days.
Cookies and Website Tracking
Our website uses cookies and similar technologies to enhance user experience and analyze website usage. These technologies collect information about your browsing behavior, including pages visited, time spent on site, and referring sources.
For detailed information about cookies we use and how to manage cookie preferences, please see our Cookie Policy.
Third-Party Links
Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices or content of third-party sites. We recommend reviewing the privacy policies of any external websites you visit.
Children's Privacy
Our legal services are intended for individuals 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected data from someone under 18, we will take steps to delete such information promptly.
International Data Transfers
Your personal data is processed and stored in Thailand. If circumstances require transfer of data outside Thailand, we will ensure appropriate safeguards are in place to protect your information in accordance with PDPA requirements.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will notify you through our website or by email if we have your email address on file.
The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
Contact for Privacy Questions
If you have questions about this Privacy Policy, our data protection practices, or wish to exercise your rights under PDPA, please contact us:
Email: [email protected]
Phone: +66 2 652 7384
Address: 59 Langsuan Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand
We will respond to privacy-related inquiries within a reasonable timeframe, typically within 30 days of receiving your request.