Privacy Policy

1. Introduction

Sayam Group ("we", "us", "our") is committed to handling personal information responsibly and in accordance with applicable data protection law in Thailand, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

If you have questions about this policy or our data practices, please contact us at [email protected].

2. Data We Collect

When you submit an enquiry through our website contact form, we collect the information you provide: your name, email address, telephone number (if given), and any description of your matter you include. We may also collect a vessel name or IMO number if you provide one.

We collect basic technical data through analytics cookies (with your consent): pages visited, browser type, and approximate location. We do not collect any financial information through the website.

3. How We Use Your Data

• To respond to your enquiry and assess whether we can assist with your matter
• To communicate with you regarding an engagement, if one is agreed
• To maintain records of client engagements as required by professional conduct standards
• To understand how our website is used (only with analytics consent)

We do not use your personal data for marketing communications without your express consent, and we do not sell or share personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent — for analytics cookies and any optional data collection
• Legitimate interests — for responding to business enquiries
• Contract performance — for data required to fulfil an engagement
• Legal obligation — for professional conduct record-keeping requirements

5. Data Retention

Enquiry data that does not result in an engagement is held for 12 months and then deleted. Client matter records are retained for 7 years from the conclusion of an engagement, in accordance with professional conduct requirements. Analytics data is retained for 26 months.

6. Data Protection Measures

Personal data is stored on secure servers with access controls. Communication by email is treated as confidential. We do not transmit client matter data through unsecured channels. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7. Cookies

We use essential cookies for website functionality and optional analytics cookies to understand how visitors use the site. For full details, please see our Cookie Policy.

8. Third-Party Services

Our website uses Google Analytics for anonymous usage data (with consent). We do not use social media tracking pixels or advertising networks. Links to external websites are provided for convenience only — we are not responsible for the privacy practices of those sites.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access — to obtain a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to data portability — to receive your data in a structured format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are directed at commercial and professional clients. We do not knowingly collect personal data from individuals under 18 years of age.

11. Jurisdiction

This policy is governed by Thai law. The supervisory authority for data protection matters in Thailand is the Personal Data Protection Committee (PDPC), which can be contacted through the Office of the National Digital Economy and Society Commission.

12. Policy Updates

We may update this policy from time to time. The current version will always be available at this URL. Material changes will be communicated by email to active clients.

13. Contact

Data controller: Sayam Group
Address: 345 Kata Road, Karon, Mueang, Phuket 83100, Thailand
Email: [email protected]