Privacy Policy

Introduction

Whitmore Associates is committed to protecting the privacy and security of personal information provided to us. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our legal services, visit our website, or communicate with our office.

We understand that legal matters involve sensitive information, and we take seriously our responsibility to handle such information with appropriate care and security. This policy describes our practices in accordance with applicable Thai data protection laws and professional obligations governing legal practice.

Information We Collect

Personal Information You Provide

When you contact our office, request services, or engage our representation, we collect information you provide directly to us. This may include your name, contact details such as email address and telephone number, identification documentation, and information relevant to your legal matter. For business clients, we collect company information, business registration details, and information about authorized representatives.

Information Collected Automatically

Our website may collect certain information automatically through cookies and similar technologies. This includes technical information such as your IP address, browser type, device information, and pages visited. We use this information to improve website functionality and understand how visitors interact with our site.

Third-Party Services

We may use analytics services to better understand website usage. These services collect information about your interaction with our site, including pages viewed and time spent on each page. We do not use this information to identify individuals but rather to improve our service delivery.

How We Use Your Information

We use collected information for several purposes related to providing legal services and maintaining our practice. Primary uses include providing the legal services you have requested, communicating with you about your matters, responding to inquiries, and managing our client relationships.

For website visitors who have not engaged our services, we use information to respond to contact form submissions, provide requested information about our practice, and improve website functionality and user experience.

All use of client information complies with attorney-client confidentiality obligations and professional conduct rules. We do not use client information for marketing purposes without explicit consent, and we do not sell or rent personal information to third parties.

Legal Basis for Processing

We process personal information based on several legal foundations. For clients who have engaged our services, processing is necessary for the performance of our engagement contract and to fulfill our legal obligations as attorneys. When you contact us for information, processing is based on your consent and our legitimate interest in responding to inquiries.

In some circumstances, we may process information based on legal requirements, such as record retention obligations, compliance with court orders, or professional conduct rules governing legal practice.

Information Sharing and Disclosure

We maintain strict confidentiality regarding client information and share it only in limited circumstances. With your consent, we may share information with counterparties, courts, government authorities, or other parties as necessary for your representation. We may also share information with service providers who assist in delivering our services, such as document management systems or secure communication platforms, always under appropriate confidentiality agreements.

We may disclose information when required by law, court order, or legal process, or when necessary to comply with professional obligations. In such cases, we will notify you unless prohibited from doing so.

Data Security Measures

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted communication channels for sensitive correspondence, secure file storage systems with restricted access, regular security assessments and updates, and staff training on data protection requirements.

While we take reasonable precautions to protect information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to maintaining industry-standard protections appropriate for legal practice.

Data Retention

We retain personal information for different periods depending on its nature and purpose. Client matter files and related communications are retained for seven years following matter completion, in accordance with professional record-keeping obligations. Website analytics data is typically retained for twelve months. Contact form submissions from non-clients are retained for two years unless a client relationship develops.

After applicable retention periods expire, we securely delete or destroy information unless continued retention is required by law or professional obligations. For active clients with ongoing retainer relationships, relevant information is maintained for the duration of the relationship plus seven years.

Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. Essential cookies are necessary for basic website functionality, including session management and security features. Analytics cookies help us understand website usage patterns and improve user experience. These are optional and can be disabled through your browser settings or our cookie preferences tool.

You can control cookie preferences through your browser settings or using our cookie management interface. Disabling certain cookies may limit some website functionality. For more information about our cookie practices, please review our Cookie Policy.

Your Rights and Choices

Under applicable data protection laws, you have several rights regarding your personal information. You may request access to the personal information we hold about you and receive a copy of that information. You may request correction of inaccurate or incomplete personal information. In certain circumstances, you may request deletion of your personal information, subject to our legal and professional retention obligations.

You may object to certain processing of your information or request restriction of processing under specific circumstances. You have the right to withdraw consent for processing based on consent, though this does not affect the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us using the information provided below. We will respond to your request within a reasonable timeframe in accordance with applicable law. Please note that some rights may be limited by legal or professional obligations, particularly regarding client matter files.

International Data Transfers

We primarily operate within Thailand and store data on servers located in Thailand or within ASEAN countries. In limited circumstances, data may be transferred internationally, such as when using certain cloud service providers or when client matters involve international parties. When such transfers occur, we implement appropriate safeguards to protect information in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and may provide additional notice through our website or direct communication with clients.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect the information we collect. Continued use of our services following policy changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your information, please contact us:

For privacy-related inquiries, please allow up to five business days for a response. Urgent matters may be addressed more quickly.

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or other relevant supervisory authority. We encourage you to contact us first so we may address your concerns directly.