Privacy Notice

Sky International Legal Co., Ltd. (“Sky International Legal”, “the Company”, “we”, “our”, or “us”) recognizes the importance of protecting Personal Data and respecting the privacy rights of clients, service users, business partners, and other individuals whose Personal Data may be processed in connection with our services.

This Privacy Notice describes how we collect, use, disclose, process, store, transfer, and protect Personal Data in connection with the provision of its professional services and the operation of its website, in accordance with:

• the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand
• applicable international data protection principles where relevant

This Notice does not form part of your contract with us.

1. Definitions

For the purposes of this Notice:

Personal Data
means any information relating to an identifiable natural person, whether directly or indirectly.

Data Subject
means the individual whose Personal Data is processed.

Data Controller
means the entity that determines the purposes and means of processing Personal Data.

Data Processor
means a person or entity that processes Personal Data on behalf of the Data Controller.

For the purposes of this Notice:

Sky International Legal Co., Ltd. acts as the Data Controller.

2. Personal Data Collected

We may collect Personal Data directly from you or through your interaction with our services, including but not limited to:

Contact Information: such as,

• Name
• Address
• Workplace address
• Telephone number
• Government issued documents
• Email address
• Messaging IDs (such as LINE, WhatsApp, and WeChat)

Financial Information: such as,

• Bank account information 

Technical Information: such as,

• IP address
• Device identifiers
• MAC address
• Cookie identifiers
• Browser information

Usage Information: such as,

• Website usage data
• Transaction records
• Communication history
• Service usage records

Multimedia Information: such as,

• Photographs
• Video recordings
• Audio recordings

Other Information

Any other information that may be considered Personal Data under applicable data protection laws.

Personal Data of other persons includes details of your dependent.

3. Sources of Personal Data

We may obtain Personal Data from the following sources:

• direct communication with clients
• website forms or online registrations
• email correspondence
• messaging platforms such as LINE, WhatsApp, and WeChat
• website cookies and analytics technologies
• lawful third-party sources.

4. Purpose of Processing Personal Data

Based on your consent, the Company may process Personal Data for the following purposes:

Legal and Professional Services

to provide legal advisory, business consulting, investigation services, and asset intelligence services.

Client Communication

to communicate with clients regarding services, inquiries, or professional engagements.

Business Operations

to manage internal operations, compliance processes, risk management, and service quality.

Website Management

to maintain the security and proper functioning of our websites, online platforms, and IT systems.

Legal Compliance

to comply with applicable laws, regulations, and regulatory requirements.

Protection of Legal Rights

to establish, exercise, or defend legal claims.

The Company will not process Personal Data for purposes other than those stated above unless additional consent is obtained or such processing is permitted by law.

Failure to provide consent on Personal Data that is necessary for the purposes described in this Notice, we may be unable to carry out certain processing activities. In some cases, this may prevent us from establishing or continuing a business relationship with you.

5. Legal Basis for Processing Personal Data

Apart from relying on your consent, the Company may process Personal Data based on the following legal bases:

• performance of a contract
• compliance with legal obligations
• legitimate interests 
• protection of vital interests
• performance of tasks carried out in the public interest.

6. Sensitive Personal Data

The Company will not collect Sensitive Personal Data unless explicit consent is obtained or such processing is permitted by law. You have the right to withdraw consent at any time.

Withdrawing your consent will not affect the legality of any collection, use, or disclosure of your Sensitive Personal Data that was carried out with your consent before it was withdrawn.

Consent refusal or withdrawal of consent may results in us not being able to provide our services, or perform all or any of the duties or obligations owed to you.

Sensitive Personal Data may include:

• race or ethnicity
• political opinions
• religious beliefs
• sexual orientation
• criminal records
• health information
• biometric data
• genetic data
• labor union information

7. Data Security Measures

The Company implements appropriate technical and organizational measures to protect Personal Data against unauthorized access, accidental loss, alteration or modification, disclosure, and destruction.

Security measures may include secure IT infrastructure, access control systems, internal confidentiality policies, staff confidentiality obligations, and data protection procedures.These measures are periodically reviewed to ensure continued effectiveness.

8. Disclosure of Personal Data

Personal Data may be disclosed to the following third parties including:

• authorized employees of the Company
• professional advisers or consultants such as auditors
• service providers, such as bank and financial institutions, cloud service providers, and auditing and accounting service providers
• regulatory authorities
• government agencies
• courts or law enforcement agencies when required by law.

All recipients are required to maintain confidentiality and comply with applicable data protection laws.

9. International Data Transfers

Where necessary, the Company may transfer Personal Data to recipients located outside Thailand. In such cases, the Company will take reasonable steps to ensure that the receiving country or organization provides adequate levels of data protection, or that appropriate safeguards are implemented.

Where appropriate, the Company may implement contractual safeguards or other legally recognized mechanisms to ensure adequate protection of Personal Data transferred across borders.

10. Data Retention

Personal Data will be retained only for as long as necessary to fulfill the purposes for which we obtained it or as required by applicable law.

Unless otherwise required by law, Personal Data may be retained for up to three (3) years after the completion of services or termination of contractual relationships.

After the retention period expires, Personal Data will be securely deleted or anonymized.

11. Rights of Data Subjects

Subject to applicable laws, data subjects may exercise the following rights:

• the right to withdraw consent
• the right to access Personal Data 
• The right to rectification
• the right to data portability
• the right to object to processing
• the right to request deletion or anonymization
• the right to restrict processing in certain circumstances 
• the right to lodge a complaint with the competent authority.

Requests to exercise these rights may be submitted to the Company using the contact details below.

12. Changes to this Notice

The Company may update this Notice from time to time to reflect changes in applicable laws or regulations, updates to business operations and improvements in security practices or technology.

Updated versions will be published on the Company’s website.

13. External Links

Our website and online platforms may contain links to third-party websites or platforms that are operated by external parties. While we aim to link only to websites that maintain high standards of privacy, we are not responsible for the content or privacy practices of those sites.

Any Personal Data you provide to such third-party websites or platforms will be collected and processed by those parties in accordance with their own privacy policies or notices, and not under this Notice. We do not control and are not responsible for how those third parties use your Personal Data.

14. Contact Information

If you have any questions or requests regarding this Privacy Notice or the processing of Personal Data, please contact: