Privacy policy

This English version is a translation provided for convenience. If it differs from the Thai version, the Thai version applies.

1. Personal data controller

Kerwin & Vance Co., Ltd. (บริษัท เคอร์วิน แอนด์ แวนซ์ จำกัด)
555 Nawamin Road, Khlong Kum, Bueng Kum, Bangkok 10240, Thailand
Telephone: +66 95 727 3555
Email: contact@kerwinvance.com

2. Information we collect

2.1 Information you give us directly

When you submit a consultation request form, we collect the following:

Your first and last name
Your phone number
Your email address
The practice area you would like to consult us about
The details of your matter, as you enter them
The language you used to fill in the form, so that our team can get back to you in the same language

Please do not include sensitive data, such as health information, criminal records or biometric data, in the details field, and do not submit anyone else's personal data unless you have the right to disclose it.

2.2 Information generated when you use the website

Web server access logs, which contain your IP address, browser type, the pages you view and the date and time.
The website's system cookies, which are used to maintain your session and protect against cross-site request forgery, and to count article readers without counting the same visit more than once.
A language cookie, which is set only when you choose a language for the website, so that pages are shown in that language on your next visit. It lasts for 1 year and stores only a language code, with no information that identifies you.
If your browser is set to a different language, the website will suggest switching languages. If you dismiss the suggestion, your browser remembers this in its own storage (local storage) and does not send this information to the website.

This website has no user-behaviour analytics tools, no advertising pixels and no marketing cookies. The only cookies it uses are those essential for the website to work and the cookie that remembers the language you have chosen.

3. Purposes and lawful bases

Contacting you and suggesting an approach in response to your inquiry — lawful basis: taking steps at your request before entering into a contract
Providing our services and coordinating with you during the engagement — lawful basis: performance of a contract, once we have agreed on the scope of work together
Keeping our systems secure and checking for abnormal use — lawful basis: legitimate interests
Complying with our legal obligations, such as keeping accounting and tax records — lawful basis: compliance with a legal obligation

We do not use your information to send you advertising messages unless you have separately given your consent, and you may withdraw that consent at any time.

4. Disclosure of information

We do not sell or exchange your personal data. We may disclose information, only to the extent necessary, to:

service providers that support our operations, such as website hosting and email providers, under confidentiality agreements
our professional advisers, such as auditors or legal advisers, when necessary
government agencies or courts, when we are required by law to disclose it

5. Third-party services used by the website

To display its typefaces correctly, the website loads font files from Google Fonts, which means that Google receives your IP address and browser information, as is normal for how the internet works. We do not send the information you enter in our forms to that provider.

When you follow our link for directions in Google Maps, your use from that point on is subject to Google's policies.

6. Retention period

We keep information from consultation request forms only for as long as necessary to communicate with you and provide our services, generally for no more than 2 years from our most recent contact, unless:

you become a client, in which case the related documents are kept for the periods required by accounting and tax laws
there is a dispute or a legal reason that requires us to keep it for longer

Web server access logs are kept for a short period for system security and are deleted as part of the system's regular log rotation.

7. Your rights

Under the Personal Data Protection Act B.E. 2562 (2019), you have the right to:

request access to, and a copy of, your personal data
request that your data be corrected so that it is accurate and up to date
request that your data be deleted or destroyed once it is no longer needed for its purpose
request that the use of your data be temporarily suspended
object to the collection, use or disclosure of your data
request that your data be transferred to another data controller, to the extent technically feasible
withdraw your consent, where we rely on consent as the lawful basis
lodge a complaint with the Personal Data Protection Committee if you believe we have acted improperly

You can exercise these rights by contacting us through the channels in Section 9. We will act on your request within the period required by law and may ask for proof of identity to protect the security of your own data.

8. Data security

The website is served over an encrypted connection (HTTPS). Information from our forms is stored in a system where access is restricted to the staff concerned, and administrator passwords are stored in a form that cannot be reversed.

However, no system is completely secure. If a personal data breach occurs that poses a risk to your rights and freedoms, we will give notice as required by law.

9. Contact us about personal data

10. Changes to this policy

We may update this policy when there are changes to how we handle data or to legal requirements, and we will show the date of the latest update at the top of this page. If the changes are material, we will notify you through appropriate channels.

This policy was prepared in Thai. Versions in other languages shown on this website are translations provided for the convenience of readers. If the wording of a translation differs from the Thai version, the Thai version prevails.