Privacy Policy

1. Introduction

Indivara ("we," "our," or "us") is committed to protecting the privacy and security of personal information collected through our legal services and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services for insurance dispute resolution matters.

This policy applies to all personal data processing activities conducted by Indivara in connection with our legal practice, including consultations, client representation, and related services. By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

For questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

2. Data Controller Information

Indivara serves as the data controller for personal information collected through our legal services and website. Our contact details are:

• Business Name: Indivara
• Address: 553 Ladprao Road, Chatuchak, Bangkok 10900, Thailand
• Email: [email protected]
• Phone: +66 2 394 8261

3. Personal Data We Collect

3.1 Information You Provide

We collect personal information that you voluntarily provide when you:

• Request a consultation through our contact form
• Engage our services for legal representation
• Communicate with us via email, phone, or in-person meetings
• Subscribe to our updates or newsletters

This information may include:

• Name and contact information (email address, phone number, mailing address)
• Insurance policy details and claim documentation
• Business information (company name, position, business address)
• Financial information relevant to insurance claims or legal fees
• Any other information you choose to provide in relation to your legal matter

3.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information through cookies and similar technologies:

• Device information (IP address, browser type, operating system)
• Usage data (pages viewed, time spent on pages, navigation patterns)
• Referring website or source that directed you to our site
• Date and time of website access

4. Legal Basis for Processing

We process personal data based on the following legal grounds under Thailand's Personal Data Protection Act (PDPA) and applicable data protection laws:

4.1 Consent

We process certain personal data based on your explicit consent, such as when you submit a contact form or subscribe to communications.

4.2 Contract Performance

Processing is necessary for the performance of our legal services engagement agreement, including client representation, legal advice, and related services.

4.3 Legal Obligations

We process personal data to comply with legal obligations, including Thai Bar Association requirements, court procedures, regulatory reporting, and anti-money laundering regulations.

4.4 Legitimate Interests

We process data for legitimate business interests such as improving our services, website functionality, and internal business operations, provided these interests do not override your fundamental rights.

5. How We Use Your Information

We use collected personal information for the following purposes:

5.1 Service Delivery

• Providing legal representation and advice on insurance disputes
• Communicating with you about your legal matter
• Preparing legal documents, pleadings, and correspondence
• Managing client relationships and case files

5.2 Business Operations

• Processing consultation requests and scheduling appointments
• Billing and payment processing
• Maintaining accurate client records
• Complying with professional obligations and regulations

5.3 Website Improvement

• Analyzing website usage to improve functionality and user experience
• Responding to inquiries submitted through our contact form
• Sending relevant legal updates or practice area information (with consent)

6. Data Sharing and Disclosure

6.1 Service Providers

We may share personal information with trusted third-party service providers who assist in our business operations, including:

• Document management and secure file storage providers
• Email and communication platform providers
• Website hosting and analytics services
• Payment processing services

These service providers are contractually obligated to protect your information and use it only for specified purposes.

6.2 Legal and Professional Obligations

We may disclose personal information when required by law or professional obligations:

• To courts, tribunals, or regulatory authorities in connection with legal proceedings
• To comply with Thai Bar Association requirements or Office of Insurance Commission inquiries
• To expert witnesses, consultants, or co-counsel engaged in your matter
• To opposing parties or their counsel as required in legal proceedings

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of our practice, personal data may be transferred to the successor entity, subject to the same confidentiality protections outlined in this policy.

7. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:

7.1 Security Measures

• Encrypted communication channels for sensitive information
• Secure document storage with access controls
• Regular security assessments and updates
• Employee training on data protection and confidentiality
• Physical security measures at our office premises

7.2 Data Breach Notification

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify you and relevant authorities as required by the PDPA within 72 hours of becoming aware of the breach.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal and professional obligations:

8.1 Client File Retention

Client files and related documentation are retained for a minimum of 10 years following case closure, in accordance with Thai Bar Association requirements and statute of limitations periods applicable to legal malpractice claims.

8.2 General Communications

Contact form submissions and general inquiries are retained for 3 years unless a client relationship is established.

8.3 Website Analytics

Website analytics data is typically retained for 26 months for the purpose of analyzing trends and improving user experience.

9. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

9.1 Right to Access

You may request access to personal data we hold about you and obtain a copy of such data.

9.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure

You may request deletion of personal data in certain circumstances, subject to legal and professional obligations requiring retention.

9.4 Right to Data Portability

You may request to receive personal data in a structured, commonly used format or request transfer to another data controller where technically feasible.

9.5 Right to Object

You may object to processing of personal data based on legitimate interests, including for direct marketing purposes.

9.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time, though this does not affect the lawfulness of processing based on consent before withdrawal.

9.7 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within 30 days as required by the PDPA. Note that attorney-client privilege and professional obligations may limit our ability to fulfill certain requests.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. For detailed information about our cookie practices, including types of cookies used and how to manage cookie preferences, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information promptly.

13. International Data Transfers

Personal data is primarily processed and stored in Thailand. If data transfers to other jurisdictions are necessary for service delivery, we ensure appropriate safeguards are in place through standard contractual clauses or other lawful transfer mechanisms.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. When material changes are made, we will update the "Last Updated" date and may provide additional notice through our website or direct communication to clients.

Continued use of our services or website following policy updates constitutes acceptance of the revised policy. We encourage periodic review of this page to stay informed about how we protect your information.

15. Supervisory Authority

If you have concerns about our data processing practices that we have not adequately addressed, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand or other relevant supervisory authority.

16. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Email: [email protected]
• Phone: +66 2 394 8261
• Address: 553 Ladprao Road, Chatuchak, Bangkok 10900, Thailand

We will respond to all inquiries within a reasonable timeframe, typically within 30 days.