Privacy Policy ME@NLAW

ME@NLAW (hereinafter referred to as the "Firm") recognizes the importance of protecting the personal data of clients, visitors, and related parties (hereinafter referred to as "You"). The Firm has established this Privacy Policy to inform you of the details regarding the collection, use, and disclosure of your personal data as follows:

1. Notification and Types of Personal Data Collected

The Firm will collect your data before or at the time you contact us for legal services, apply for a job, or enter into a contract with the Firm. The data we process includes:

Identity Data: Such as name-surname, identification card number, passport number, date of birth, and personal photographs (if necessary).
Contact Data: Such as address, telephone number, email address, and Line ID.
Financial Data: Such as bank account number, payment history, and tax information.
Litigation or Legal Service-Related Data: Which may include details of facts in the case , evidence documents, or information regarding the opposing party.
Sensitive Data: In certain cases, necessary for the case, the Firm may need to collect information regarding race, religion, criminal records, or health data. The Firm will request your explicit consent, unless permitted by law.

2. Purposes for Processing Personal Data

The Firm collects and uses your data for the following purposes:

2.1 For providing legal advice, litigation, or proceeding with juristic acts/contracts as assigned by you.

2.2 For identity verification (KYC) and Conflict of Interest Checks prior to accepting work.

2.3 For issuing invoices, receipts, and accounting purposes.

2.4 For coordination and updating on operational status.

2.5 For security within the Firm’s premises (e.g., in case of card exchange or CCTV - if applicable).

2.6 For any other necessary and reasonable causes (if any), whereby the Firm will inform you in advance prior to collecting or providing your data, both before and/or during the service provision.

3. Legal Bases for Processing

The Firm processes your data under the following legal bases:

Contract Basis: For the performance of duties under the lawyer engagement agreement or service agreement.
Legal Obligation Basis: Such as accounting and taxation, compliance with court orders, or anti-money laundering laws.
Legitimate Interest Basis: For internal management of the Firm or security maintenance.
Consent Basis: In cases where it is necessary to collect sensitive data or for marketing purposes (if any).

4. Necessity of Providing Personal Data

Providing personal data under Clause 1 is necessary for the performance of duties under the contract and compliance with the law. If you do not provide such data, the Firm may not be able to provide legal services to you, or may not be able to proceed with the contract or services related to various lawsuits completely.

5. Data Retention Perio

The Firm will retain your personal data for as long as necessary according to the objectives:

General Cases: Retained throughout the duration of the engagement contract and for a further 10 years from the date the case ends or the contract is terminated (according to the general legal statute of limitations).
Accounting and Tax Data: Retained for at least 5 years in accordance with the Revenue Code. Upon the expiration of such period, the Firm will proceed to delete, destroy, or anonymize the data.

6. Disclosure or Transfer of Personal Data

The Firm may need to transfer your data to third parties only to the extent necessary, including:

Courts, police officers, the Legal Execution Department, or government agencies related to the case.
Opposing parties or opposing counsel (as necessary according to the legal proceedings).
External service providers such as auditors, financial advisors, and information system providers (Cloud/Server). You will be notified in advance before data transfer. If data is transferred to a foreign cloud system, the Firm will ensure that the service provider has adequate data protection standards as required by law.

7. Security Measures for Personal Data

The Firm recognizes the confidentiality of clients and personal data and has established appropriate security measures, both technical and administrative, such as:

Limiting data access rights (Access Control) only to relevant Firm personnel.
Storing case files in locked filing cabinets.
Using passwords and cybersecurity systems for electronic data.
Entering into Non-Disclosure Agreements (NDA) with employees and external service providers.

8. Rights of the Data Subject

You have the following rights under the PDPA law:

Right to access and request a copy of personal data.
Right to request rectification of data.
Right to request deletion or destruction of data.
Right to request suspension of data use.
Right to object to the collection, use, or disclosure of data.
Right to withdraw consent (in cases where consent has been given).
Right to complain to the Personal Data Protection Committee if you believe the Firm has violated the law.
Right to request receipt or transfer of personal data.

9. Contact Channels

If you have any questions or wish to exercise your rights regarding personal data, you can contact us at:

Data Controller:

Organization Name: ME@NLAW.
Contact Address: U.K. 30 (Room 628), Soi Charan Sanitwong 40, Bang Yi Khan, Bang Phlat, Bangkok 10700 – Used for receiving postal mail only.

Remark: The actual location is not yet ready for service, but you can make an appointment to meet us – limited to within inner Bangkok.

Telephone: (+66) 086 308 0569, (+66) 089 845 0659.
Email: thitawan@meanfirm.com.
Data Protection Officer (DPO): Mr. Thitawan Teankasiri.

Announced on 5 January 2016,

Thitawan Teankasiri

Founder of ME@NLAW