Privacy Policy — Harbor & Clark
Schedule a Consultation

Legal

Privacy Policy

Last updated: July 7, 2026

Harbor & Clark Legal Co., Ltd. (“we,” “us,” “our,” or “the Firm”) respects your privacy and is committed to protecting the personal data of visitors to this website and users of our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding it.

For the purposes of the Thailand Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”), Harbor & Clark Legal Co., Ltd. is the data controller responsible for your personal data.

Data Controller
Harbor & Clark Legal Co., Ltd.
Registered Address
208 Bangkok Building, Suite 702/1, 7th Floor, Wireless Road, Lumphini, Pathumwan, Bangkok 10330
Contact
info@harborclark.com

We process personal data for the following purposes: responding to inquiries submitted through our contact/lead forms, scheduling and managing consultations, processing payments for legal services, and communicating with prospective and existing clients about our services.

Our legal bases for processing include your consent (obtained via the consent checkboxes on our contact form), the necessity of processing to take steps prior to entering a contract for legal services, and our legitimate interest in operating and promoting our practice, consistent with PDPA Section 24 and GDPR Article 6.

We collect the following categories of personal data:

Contact details — first name, last name, email address, and phone number, submitted through our website contact form.

Inquiry details — the type of legal service you are inquiring about and a free-text description of your situation, which you voluntarily provide through our contact form. This free-text field may occasionally include sensitive details you choose to share (for example, family or health-related circumstances relevant to your inquiry); we handle any such information with the same care as other personal data and only for the purpose of responding to your inquiry.

Consultation scheduling information — first name, last name, email address, and phone number, collected when you book a consultation through our scheduling provider (the same core fields as our contact form).

Payment-related information — name, email address, and payment card details, collected and processed directly by our payment provider when you make a payment for our services. We do not directly store full payment card details; these are handled entirely by our PCI-compliant payment provider.

Marketing preference — whether you have opted in to receive further communications from us, recorded via a checkbox on our contact form.

We engage the following third-party service providers (“processors”) to help us operate our website and deliver our services. Each processor acts on our instructions and processes personal data only for the purpose described below.

  • HubSpot — processes contact and inquiry details submitted through our website lead/contact forms.
  • Calendly — processes name, email, and scheduling details when you book a consultation with us.
  • Stripe — processes payment and billing information when you make a payment through our payment link.

Each of these providers may process data outside Thailand and maintains its own privacy policy and security practices, which we encourage you to review. Data Processing Agreements (“DPAs”) with HubSpot, Calendly, and Stripe are in place, consistent with PDPA Section 40 and GDPR Article 28, governing how each processor may handle personal data on our behalf.

Because HubSpot, Calendly, and Stripe are US-based service providers, your personal data may be transferred to, stored, and processed in the United States or other countries outside Thailand and the European Economic Area. We rely on appropriate safeguards — including Standard Contractual Clauses incorporated into each processor’s Data Processing Agreement — to protect your data in these circumstances.

Our website may use cookies and similar tracking technologies operated by us and by the third-party providers listed in this Policy (such as HubSpot) to operate core functionality and, where applicable, to understand site usage.

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete personal data
  • Erase your personal data (“right to be forgotten”)
  • Restrict processing of your personal data
  • Data portability — receive your data in a structured, commonly used format
  • Object to certain processing, including for direct marketing
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@harborclark.com. We will respond without undue delay, and in any event within thirty (30) days of receiving a verifiable request, in accordance with applicable law.

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting obligations.

General contact and inquiry data: retained for three (3) years from the date of our last interaction with you.

Accounting and financial records (e.g., invoices, payment records): retained for five (5) years from the date of the relevant transaction, in accordance with Thailand’s Accounting Act B.E. 2543 (2000), Section 14.

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

Apitsada Bunditchart, Managing Director
Email: info@harborclark.com

A formal Data Protection Officer appointment is not mandatory for the Firm’s current scale and processing activities under PDPA Section 41 / GDPR Article 37; the designated contact above serves this role.

This Privacy Policy was last updated on July 7, 2026.