Privacy Policy

This Privacy Policy explains how Naga Pact ("we", "us", "our") collects, uses, stores, and protects personal data in connection with our website at naga-pact and our professional IP registration services. It is issued in compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller responsible for your personal data is:

Naga Pact
42 Phayathai Road, Ratchathewi, Bangkok 10400, Thailand
Telephone: +66 2 215 3846
Email: privacy@naga-pact

2. Personal Data We Collect

We collect personal data only where it is relevant to the services we provide or to the operation of this website. The categories of data we may collect include:

• Contact information: full name, email address, telephone number, country of residence or incorporation.
• Business information: company name, registration details, nature of business, and details of IP assets relevant to your enquiry.
• Correspondence: messages submitted via our contact form, emails, and records of telephone conversations where notes are taken.
• Technical data: IP address, browser type, device type, pages visited, and approximate location data collected through website analytics tools.
• Cookie data as described in our Cookie Policy.

We do not collect sensitive personal data (as defined under the PDPA) unless specifically necessary for a matter and with your explicit consent.

3. Purpose and Lawful Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

3.1 Provision of Professional Services

Where you engage us for IP registration or related services, we process your personal data as necessary to perform our contractual obligations and to comply with legal and regulatory requirements applicable to our practice.

3.2 Responding to Enquiries

When you submit an enquiry via our website, we process your data on the basis of our legitimate interest in responding to potential clients, and where applicable, as preparatory steps for entering into a contract.

3.3 Website Analytics

We analyse website usage data on the basis of our legitimate interest in understanding how our website is used and improving its content. Where analytics tools that set non-essential cookies are used, we rely on your consent.

3.4 Legal Compliance

We may process your data where necessary to comply with applicable law, regulatory requirements, or court orders.

4. Retention of Personal Data

We retain personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. As a general guide:

• Client matter files are retained for a minimum of seven years following the conclusion of an engagement, in accordance with professional practice requirements and Thai commercial law.
• Enquiry correspondence that did not lead to an engagement is retained for up to two years.
• Website analytics data is retained in aggregate form; individual session data is not stored beyond 26 months.

When data is no longer required, it is securely deleted or anonymised.

5. Sharing of Personal Data

We do not sell, rent, or trade personal data. We may share personal data in the following circumstances:

• With regulatory bodies: The Department of Intellectual Property (DIP) and other Thai government authorities as required for the filing and prosecution of applications on your behalf.
• With service providers: Third parties engaged to support our operations — such as IT hosting providers, accounting software, and email services — who are bound by confidentiality obligations and data processing agreements.
• For legal compliance: Where disclosure is required by law, court order, or regulatory obligation.

Any third parties with whom we share data are required to handle it consistently with this policy and applicable law.

6. International Transfers

Some of our service providers may be located outside Thailand. Where personal data is transferred to a third country, we take steps to ensure adequate protection is in place, including the use of standard contractual arrangements or reliance on adequacy decisions where applicable. Foreign applicants engaging us for Thai IP filings should note that their data will necessarily be processed in Thailand as part of the filing procedure.

7. Your Rights Under the PDPA

Subject to applicable exceptions and conditions under the PDPA, you have the following rights in relation to your personal data:

• Right of access: To request confirmation of whether we hold your data and, if so, to receive a copy.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction: To request that we restrict processing of your data in certain circumstances.
• Right to data portability: To receive your data in a structured, commonly used format where processing is based on consent or contract and is carried out by automated means.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@naga-pact. We will respond within 30 days. We may request verification of your identity before processing a request.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

8. Cookies

We use cookies and similar technologies on this website. For full details of the cookies we use, the purposes they serve, and how to manage your preferences, please see our Cookie Policy.

9. Minors

Our services are directed at businesses and adults engaged in professional or commercial activities. We do not knowingly collect personal data from individuals under the age of 20. If we become aware that we have inadvertently collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services following any update constitutes acceptance of the revised policy.

11. Contact Us

For any questions, concerns, or requests relating to your personal data or this policy, please contact us at:

Naga Pact — Data Privacy
42 Phayathai Road, Ratchathewi, Bangkok 10400
Email: privacy@naga-pact
Telephone: +66 2 215 3846