Privacy Policy
Last Updated: January 20, 2026
Introduction
Lunar Weft is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our legal services.
As a legal services provider, we are bound by attorney-client privilege and professional obligations under Thai law. This policy describes our data practices in addition to those professional duties. For questions regarding this policy, please contact us at [email protected].
Information We Collect
Information You Provide
When you contact us or engage our services, we collect information you provide directly, including:
- Name and contact information (email address, phone number, mailing address)
- Information relevant to legal matters you wish to discuss
- Professional details such as business name and role
- Payment and billing information when engaging our services
- Communications you send to us
Automatically Collected Information
When you visit our website, we may automatically collect certain technical information:
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on pages
- Referring website address
- Device and operating system information
This information is collected through cookies and similar technologies. Please see our Cookie Policy for details.
How We Use Your Information
We use collected information for the following purposes:
- Providing legal services and responding to your inquiries
- Establishing and maintaining attorney-client relationships
- Conducting conflict checks and complying with professional obligations
- Processing payments and maintaining billing records
- Communicating about matters, appointments, and service updates
- Improving our website and services through analytics
- Complying with legal obligations and regulatory requirements
- Preventing fraud and maintaining security
Legal Basis for Processing
Under Thai data protection law, we process your personal information based on:
- Consent: When you provide information through our website contact form or consultation request
- Contract: When processing is necessary to fulfill our engagement agreement
- Legal Obligation: When required by Thai law or professional regulations
- Legitimate Interest: For business administration, preventing fraud, and improving services
Information Sharing and Disclosure
We do not sell or rent your personal information. We may share information in the following limited circumstances:
- Service Providers: Third parties who assist with website hosting, payment processing, or administrative services under confidentiality agreements
- Legal Requirements: When required by Thai law, court order, or regulatory authority
- Professional Obligations: With your consent or as necessary for legal representation (e.g., court filings, opposing counsel)
- Business Transfers: In connection with a merger, sale, or transfer of our practice (subject to confidentiality protections)
Attorney-client privileged information receives additional protection and is disclosed only as permitted by law or with client authorization.
Data Retention
We retain personal information for different periods depending on the purpose:
- Website Inquiries: Contact information retained for 2 years unless you engage our services
- Client Files: Matter-related information retained for 10 years following matter conclusion, as required by Thai Bar Association rules
- Financial Records: Billing and payment information retained for 7 years per Thai accounting requirements
- Marketing Communications: Until you unsubscribe or request removal
Following retention periods, information is securely destroyed unless longer retention is legally required or necessary for ongoing matters.
Data Security Measures
We implement appropriate technical and organizational measures to protect personal information:
- Secure servers with encryption for data transmission
- Access controls limiting information to authorized personnel
- Secure physical storage for paper documents
- Regular security assessments and updates
- Staff training on confidentiality and data protection
- Secure disposal procedures for outdated information
Despite these measures, no method of transmission or storage is completely secure. We encourage clients to use secure methods when communicating sensitive information.
Your Privacy Rights
Under Thai data protection law, you have the following rights regarding your personal information:
- Access: Request confirmation of what information we hold about you
- Rectification: Request correction of inaccurate information
- Erasure: Request deletion of information (subject to retention requirements)
- Restriction: Request limitation on processing in certain circumstances
- Portability: Receive your information in structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdrawal of Consent: Withdraw consent for processing where consent was the basis
To exercise these rights, contact us at [email protected]. We will respond within 30 days. Note that some rights may be limited by attorney-client privilege or legal retention requirements.
If you believe we have not adequately addressed your privacy concerns, you may lodge a complaint with the Personal Data Protection Committee in Thailand.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality and analyze usage. We use:
- Essential Cookies: Required for website operation and security
- Analytics Cookies: Help us understand how visitors use our site
- Preference Cookies: Remember your settings and choices
For detailed information about cookies we use and how to manage them, please see our Cookie Policy.
Third-Party Websites
Our website may contain links to third-party websites for reference or convenience. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Information from Minors
Our services are intended for adults aged 18 and over. We do not knowingly collect information from individuals under 18. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.
International Data Transfers
Your information is primarily stored and processed in Thailand. Some service providers may process data outside Thailand. When transferring data internationally, we ensure appropriate safeguards are in place through contractual protections and compliance with applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be posted on this page with an updated "Last Updated" date. For material changes affecting existing clients, we will provide direct notification.
Continued use of our website or services after policy updates constitutes acceptance of the revised policy.
Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Lunar Weft
22/8 Langsuan Road, Lumphini, Pathum Wan
Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 843 2716