What we collect

• Contact form: your name or nickname, phone number or LINE ID, email (if given), the type of matter and any message you write, plus your browser user agent and IP address used for spam protection
• AI intake assistant: the messages you type in the chat window and the case summary the assistant produces when you ask to be contacted. The raw conversation is not stored permanently
• External chat channels: when you message us on LINE, WhatsApp, WeChat or Facebook, those messages are also subject to that provider's policy
• Attribution: campaign parameters (utm, gclid, fbclid), the page you were on before contacting us and the referring site, so we know which channels work
• Website usage: cookies and identifiers set by Google Tag Manager / Google Analytics / Google Ads recording pages viewed, device and contact-click events, without directly identifying you

Why we use it and on what legal basis

• To answer your enquiry, assess feasibility and quote — your consent given when submitting the form, and steps taken at your request before a contract
• To measure marketing and improve the site — our legitimate interest, using aggregated and pseudonymous data where possible
• To prevent spam and abuse (rate limiting, bot-trap fields) — our legitimate interest
• We do not sell personal data and do not use what you send us to advertise to other people

Information about other people that you provide

Information about a person you ask us to investigate is used only to assess and carry out the engagement agreed with you, within what the law allows. We do not take on work that requires protected data such as another person's bank, telephone or government records, and we tell you at the assessment stage if a request goes beyond that scope.

How long we keep it

Enquiries that do not lead to an engagement are reviewed and deleted on a 12-month cycle after being closed, or earlier on request. Client data is kept according to the engagement and our legal obligations. Website analytics data follows Google Analytics' standard retention.

Service providers acting on our behalf

We share data only with providers that process it on our instructions.

• Supabase — database and storage
• Vercel — website hosting
• Upstash — rate limiting for spam protection (IP addresses, transiently)
• Sentry — error logging so we can fix faults
• Anthropic — processing of AI intake assistant messages
• Google — Tag Manager, Analytics and Ads for measurement
• LINE — internal notification to our team of a new enquiry (the name and number you gave), and when you choose to message us on LINE
• Meta (WhatsApp / Facebook), Tencent (WeChat) — when you choose to message us on those channels

International transfers

Some providers above process data outside Thailand. We choose providers with internationally recognised data-protection safeguards and send only what the purposes above require.

Cookies

The site uses cookies needed for it to work and Google analytics/advertising cookies, which load after the page has rendered. You can block cookies in your browser settings; the site keeps working.

Your rights

You may request access, a copy, correction, deletion, restriction, object to processing, and withdraw consent at any time without affecting processing already carried out. Send requests to the email below; we respond within 30 days. You may also lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

Children

Our services are for people aged 18 and over. We do not knowingly collect data from minors through this website.

Changes to this notice

When we make a material change we update the "last updated" date above and note it on this page.