I. Data Controller
Eksiam & Partners Co., Ltd. (บริษัท เอกสยาม แอนด์ พาร์ทเนอร์ส จำกัด) acts as the data controller for the eksiamtax.com website.
Registered address: 300/90 Nawamin Road, Bueng Kum, Bangkok 10240, Thailand
Personal data inquiries: contact@eksiamlegal.com · Tel. +66 81 654 5922 (in Thailand 081 654 5922)
II. Scope of Application
This policy applies to the collection, use and disclosure of personal data that the company receives through the eksiamtax.com website and the communication channels linked to it, such as the contact form, email, telephone and the LINE Official Account.
This policy does not cover the processing of personal data under legal service agreements made with clients, which are subject to separate data processing terms in the service agreement.
III. Personal Data Collected
The company collects the following categories of personal data:
1. Data provided directly by users
- First name and surname, and the name of the company or organization
- Email address, telephone number and any other contact channel provided
- Details of the matter to be discussed (as entered in the form)
- The type of service of interest
2. Data collected automatically
- IP address, browser type, device and operating system
- Pages visited, time of visit and basic usage behavior
- The source of the visit (referrer)
- Cookie data (see Part IX for details)
IV. Purposes of Use
The company uses users’ personal data for the following purposes:
- To contact users to arrange a consultation, answer questions and prepare recommendations
- To make a preliminary assessment of the situation and assign a suitable advisory team
- To send service proposals and written fee estimates
- To improve the services and the user experience of the website
- To analyze use of the website in the form of aggregated statistics (aggregated analytics)
- To comply with the law and with applicable legal proceedings
V. Lawful Basis for Processing
The company processes personal data on the following lawful bases under the PDPA:
- Consent — when a user fills in the form or subscribes to receive information
- Contract — when processing is necessary to prepare to provide a service requested by the user
- Legitimate interests — to develop the services and maintain the security of the website
- Legal obligation — when the company is subject to a legal requirement with which it must comply
VI. Disclosure to Third Parties
The company will not sell, exchange or disclose users’ personal data to outside persons, except in the following cases:
- With the express consent of the data subject
- Disclosure to service providers that support the company’s operations, such as email, hosting and analytics providers, under contracts that set out data protection measures in accordance with the PDPA
- Disclosure under an order of a government agency or a court, or in legal proceedings by which the company is bound
- Disclosure to protect the rights, property or safety of the company and of the persons concerned
VII. Retention Period
The company retains users’ personal data only for as long as necessary to achieve the purposes stated in this policy and as required by law, according to the following criteria:
- Data of inquirers who do not become clients: retained only as necessary for the purposes notified, and for no longer than the period prescribed or permitted by law
- Client data: as specified in the service agreement and as required by the laws governing the profession
- Statistical and analytical data: in anonymous form, without a time limit
When that period ends, the company will delete or destroy the data, or render it unable to identify any person.
VIII. Rights of the Data Subject
Under the PDPA, data subjects have the following rights:
- Right of access — to request access to, and a copy of, their personal data
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion or destruction of the data (right to be forgotten)
- Right to restriction — to request that processing of the data be suspended in certain cases
- Right to object — to object to processing of the data in certain cases
- Right to data portability — to receive the data in a transferable format
- Right to withdraw consent — to withdraw consent previously given
- Right to lodge a complaint — to complain to the Office of the Personal Data Protection Committee if they consider that the company has not complied with the PDPA
A request to exercise these rights may be sent in writing to contact@eksiamlegal.com. The company will act on the request without delay and in any event within 30 days of the date the request is received (Personal Data Protection Act B.E. 2562 (2019), Section 30, paragraph four).
IX. Cookies and Tracking Technologies
The website uses cookies to make it easier to use and to analyze use of the website in statistical form. The cookies used fall into the following types:
- Strictly necessary cookies — required for the website to function
- Analytics cookies — used to analyze use of the website in a form that does not identify individuals
- Functional cookies — remember user settings, such as language
Users may refuse or delete cookies through their browser settings. Refusing certain types of cookies may prevent some features of the website from working fully.
Google Analytics 4 and Consent
This website uses Google Analytics 4 (a measurement tool of Google LLC) to count visitors, pages viewed, traffic sources and clicks on contact channels, namely telephone, LINE, WhatsApp, email and form submissions. Google Consent Mode is set to default to “denied”, so analytics cookies and advertising cookies operate only after the user clicks “Accept all” in the consent banner. If the user selects “Necessary only”, the browser still sends cookieless signals to Google, which are used to estimate the overall number of visitors.
For users who consent, visit data may be used to build audiences for showing advertisements, through the advertising services of Google or Meta, to people who have previously visited the website. Data of users who select “Necessary only” is not used for this purpose.
The user’s choice is stored in the user’s own browser. Users may change their choice or withdraw consent at any time through the “Cookie settings” link in the contact section at the bottom of the page, or by deleting this website’s data in the browser. Withdrawal of consent does not affect processing carried out before the withdrawal.
Form Data and Receiving News
Messages from the contact form are sent through the form-receiving system of Eksiam & Partners Co., Ltd., which runs on the services of Cloudflare, Inc. They are then sent by email to the company and recorded in a contact database on Google Sheets in the company’s Google account, which is not shared with any other person. The system attaches the source of the visit, namely the utm_source, utm_medium and utm_campaign values, the referring website and the first page visited, so that the company knows how the person found the website. These service providers may store data on servers outside Thailand.
The “consent to receive news” box in the form is optional and separate from consent to be contacted back. Only those who tick this box will receive news and service information by email or LINE according to the topics they are interested in. Users may withdraw consent at any time by notifying contact@eksiamlegal.com or by replying to the news message. Withdrawal of consent does not affect contact regarding the matter requested.
X. Contact Regarding This Policy
If you have any questions or suggestions, or wish to exercise your rights under the PDPA, please contact the company at:
Eksiam & Partners Co., Ltd.
300/90 Nawamin Road, Bueng Kum, Bangkok 10240, Thailand
Email: contact@eksiamlegal.com
Tel.: +66 81 654 5922 (in Thailand 081 654 5922) · Monday–Friday 09:00–18:00
The company reserves the right to revise this policy from time to time and will state the date of revision at the beginning of the document. Significant changes will be announced through the website.