1. Information We Collect
Information you provide to us
We collect personal data that you give us directly, such as when you:
- Contact us through our website's inquiry form, email, or LINE/WhatsApp
- Request a consultation or quote
- Engage us for services and complete onboarding or KYC documentation
- Correspond with us by email, phone, or in person
Depending on the nature of your inquiry, this may include:
- Identification data: full name, nationality, date of birth, passport or national ID number, visa or work permit details
- Contact data: email address, phone number, mailing address
- Business and financial data: company name, business registration details, tax identification number, financial or income information relevant to tax filings, bank account details (where required for engagements such as fee payment or invoicing)
- Immigration and employment data, where relevant to visa, work permit, or HR-related services
- Any other information you choose to share with us in the course of describing your matter or request
Information we collect automatically
When you visit our website, we may automatically collect limited technical information, such as your IP address, browser type, device information, pages visited, and referring website, typically through cookies and similar technologies. See Section 5 for more detail.
Information from other sources
In the course of an engagement, we may receive personal data about you from third parties, such as government agencies (e.g., Thai Revenue Department, Immigration Bureau, Department of Business Development), your employer, co-applicants on a visa or company matter, or other professionals working on the same matter (e.g., accountants, other law firms).
2. How We Use Your Information
We use personal data for purposes including:
- Responding to your inquiries and providing quotes
- Delivering the legal, tax, immigration, corporate, or administrative services you engage us for
- Preparing and filing documents with Thai government authorities on your behalf, where authorized
- Communicating with you about your matter, including via email, phone, or messaging apps such as LINE and WhatsApp
- Invoicing and processing payments
- Maintaining internal business records and case files
- Complying with our legal, regulatory, and professional obligations
- Improving our website and services
- With your consent, sending updates about our services (you may opt out at any time)
We do not use your personal data to train artificial intelligence models or automated systems.
3. How We Share Your Information
We do not sell your personal data. We may share it in the following circumstances:
- With government authorities, where necessary to deliver the service you have engaged us for (for example, filing documents with the Revenue Department, Immigration Bureau, or Department of Business Development)
- With service providers who support our operations, such as IT hosting providers, cloud storage providers (e.g., Google Drive), and administrative tools, under confidentiality obligations
- With other professionals working on your matter, such as your accountant or another law firm, where relevant and typically with your knowledge
- With our business partners or affiliated colleagues involved in delivering your engagement (for example, Justin Lee for business development coordination, or specialist colleagues where a matter requires it)
- Where required by law, such as in response to a valid court order, subpoena, or regulatory request
- In connection with a business transaction, such as a merger, acquisition, or restructuring of our firm, subject to confidentiality protections
- With your consent or at your direction
We do not disclose client-privileged or confidential information except as permitted under our professional obligations, applicable law, or with your consent.
4. Legal Basis for Processing
Under the PDPA, we rely on one or more of the following legal bases to process your personal data:
- Contractual necessity — to perform our engagement with you or to take steps prior to entering into an engagement (e.g., preparing a quote)
- Legal obligation — to comply with obligations under Thai law, including tax, immigration, and corporate regulations, and our professional duties as a legal and consulting services provider
- Legitimate interests — to operate and improve our business, including responding to inquiries, maintaining records, and website analytics, balanced against your rights and interests
- Consent — for direct marketing communications and, where applicable, sensitive personal data (such as health information relevant to a visa application), which we will only process with your explicit consent unless another legal basis applies
You may withdraw consent at any time where consent is the basis for processing, without affecting the lawfulness of processing carried out before withdrawal.
5. Cookies and Website Analytics
Our website may use cookies and similar technologies to operate correctly and to understand how visitors use our site (for example, through Google Analytics). Cookies may collect information such as your IP address, browser type, and browsing behavior on our site.
You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of our website function.
We do not use cookies to build advertising profiles for third-party advertisers.
6. Data Security and Retention
We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or loss, consistent with our obligations under the PDPA.
No system can be guaranteed 100% secure, and we cannot guarantee the absolute security of information transmitted to us over the internet.
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or professional record-keeping requirements (which may require retention of client files for a period after an engagement ends, as determined by applicable Thai law and professional standards). When no longer needed, we securely delete or anonymize personal data.
7. Your Rights Under the PDPA
Subject to applicable exceptions under Thai law, you have the right to:
- Access the personal data we hold about you and request a copy
- Rectify inaccurate or incomplete personal data
- Erase or delete your personal data, subject to certain legal or professional record-keeping exceptions
- Restrict our processing of your personal data in certain circumstances
- Object to our processing of your personal data, including for direct marketing
- Data portability, where technically feasible
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been violated
To exercise any of these rights, please contact us using the details in Section 10. We will respond to verified requests within a reasonable timeframe, consistent with the PDPA.
8. Cross-Border Data Transfers
In limited circumstances, personal data may be transferred to or stored on servers located outside Thailand (for example, where we use cloud service providers such as Google Drive). Where this occurs, we take steps to ensure such transfers comply with the PDPA, including verifying that the recipient country or organization maintains adequate data protection standards, or by putting in place appropriate safeguards such as contractual protections.
9. Children's Privacy
Our services are intended for adults and businesses. We do not knowingly collect personal data from individuals under 18 years of age, except where necessary in the context of a client's family-related matter (for example, a dependent's visa application), in which case such data is provided and processed with the consent and involvement of a parent or legal guardian.
10. How to Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights under the PDPA, please contact us:
Witsaroot Lee & Li Consulting Co., Ltd. 548 One City Centre, Level 38, Room S38060 Ploenchit Road, Lumpini, Pathum Wan Bangkok 10330, Thailand
Yo can contact our Data Protection Officer at dpo@wllconsult.com or send us an email via our Contact Us page.
If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically. Material changes will be communicated through a notice on our website.
We're using cookies.