Privacy Policy
Last Updated: 14 April 2025
This policy describes how Mekong Counsel ("we", "us", "our") collects, uses, and protects personal data in connection with our work permit and employer compliance services. It applies to personal data submitted through our website and provided in the course of service engagements. We operate from Bangkok, Thailand, and are subject to Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data Controller
The data controller for personal data collected through this website and in the course of our service engagements is:
Mekong Counsel
156 Sukhumvit Soi 49, Khlong Tan Nuea, Watthana, Bangkok 10110
Email: [email protected]
Telephone: +66 2 392 6741
2. Personal Data We Collect
Through the website enquiry form
- Full name
- Email address
- Telephone number (if provided)
- Description of your enquiry
In the course of service delivery
- Passport details and copies
- Visa and immigration status documents
- Employment details (role, salary, employer)
- Educational and professional qualifications
- Company registration documents (for employers)
- Correspondence with government authorities
Automatically collected data
- IP address and browser information
- Pages visited and time spent on site
- Cookie data (see Section 6)
3. How We Use Personal Data
We use personal data for the following purposes:
- Service delivery: Preparing and submitting work permit applications and employer compliance documentation on behalf of clients.
- Communication: Responding to enquiries, providing status updates, and issuing written stage confirmations during engagements.
- Legal compliance: Filing documents with government authorities as required by the Work and Employment of Aliens Act and related legislation.
- Renewal tracking: Maintaining records of permit and visa expiry dates to provide advance notifications to clients.
- Site improvement: Analysing website usage to identify and resolve technical issues.
We do not use personal data for direct marketing without explicit consent. We do not sell personal data to third parties under any circumstances.
4. Legal Basis for Processing
- Contract performance: Processing necessary to carry out the service engagement agreed between the client and Mekong Counsel.
- Legal obligation: Processing required to submit documents to the Department of Employment, Board of Investment, Immigration Bureau, or other government authorities as part of the permit process.
- Legitimate interests: Maintaining client records and renewal schedules for the purpose of providing continuity of service.
- Consent: For website analytics cookies, where consent has been given via the cookie consent mechanism.
5. Data Retention
- Enquiry form data: Retained for 12 months from the date of enquiry, or for the duration of any subsequent engagement.
- Engagement files: Retained for 5 years from the date of permit issuance or engagement close, to allow for any subsequent renewals or regulatory queries.
- Government-submitted documents: Copies retained for the period required by Thai law, currently a minimum of 5 years.
- Website analytics data: Retained for 26 months in aggregate, anonymised form.
6. Cookies
Our website uses cookies to improve your browsing experience and to collect analytics data. You can manage your cookie preferences through the consent mechanism on this website. For full details, see our Cookie Policy.
7. Data Sharing
We share personal data only in the following circumstances:
- Government authorities: Personal data is shared with the Department of Employment, Board of Investment, Immigration Bureau, and other relevant authorities as required to process work permit applications. This sharing is required by law.
- Analytics providers: Anonymised website usage data may be processed by third-party analytics tools. No personally identifiable information is shared for analytics purposes.
- Professional advisers: In limited circumstances, we may consult with external legal professionals in connection with a specific case. Any such sharing is governed by confidentiality obligations.
We do not transfer personal data outside Thailand except where required by the permit filing process itself (for example, where documents must be submitted to an authority with international data exchange protocols).
8. Data Protection Measures
- Client files are stored on password-protected systems with access limited to the staff member managing the relevant engagement.
- Sensitive documents submitted by clients are transmitted via secure channels.
- Physical copies of documents are stored in locked filing at our Bangkok office.
- In the event of a data breach that is likely to affect data subjects' rights and freedoms, we will notify affected individuals and the Office of the Personal Data Protection Committee (PDPC) within the timeframes required by the PDPA.
9. Your Rights Under Thai PDPA
Under Thailand's Personal Data Protection Act, you have the following rights:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct inaccurate data.
- Right to erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records.
- Right to restriction: You may request that we limit our processing of your data in certain circumstances.
- Right to data portability: You may request that we provide your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent (such as analytics cookies), you may withdraw consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe we have not handled your data correctly, you may lodge a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC).
10. Third-Party Links
Our website may contain links to external sites, including government portals and professional body websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit.
11. Children's Privacy
Our services are provided to businesses and working-age adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.
12. Updates to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. Updated versions will be published on this page with a revised "Last Updated" date. We will notify active clients of material changes by email where appropriate.
13. Contact
For privacy-related enquiries, data access requests, or complaints:
Mekong Counsel
156 Sukhumvit Soi 49, Khlong Tan Nuea, Watthana, Bangkok 10110
Email: [email protected]
Telephone: +66 2 392 6741