Privacy Policy | Heirloomly

Heirloomly ("we", "us", "our") is committed to handling your personal information with care. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have under applicable law — including Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Who We Are

Heirloomly is an administrative and educational services provider based at 52 Ratchaphruek Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand. We provide estate record organisation sessions, household ledger kits, and facilitated family conversation programmes. We do not provide legal, financial, or professional advice.

For data-related questions, contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

Contact forms: name, email address, phone number, and any message you choose to send.
Session work: information you share verbally or in writing during our sessions. We do not retain copies of your personal documents.
Website analytics: anonymised browsing data if you have consented to analytics cookies.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: when you submit a contact form or accept optional cookies.
Contractual necessity: to deliver services you have engaged us for.
Legitimate interests: to operate and improve our services, where those interests are not overridden by your rights.

4. How We Use Your Data

Responding to enquiries and scheduling sessions.
Delivering the service you have purchased.
Sending service-related communications (not marketing, unless you opt in).
Improving our services through anonymised analytics.
Complying with applicable legal obligations.

5. Data Retention

Contact enquiry data is retained for up to 12 months. Client session notes and administrative records are retained for up to 3 years from the date of service delivery. We then delete this data securely unless a longer retention period is required by law. We do not retain copies of any personal documents you bring to sessions.

6. Data Sharing

We do not sell your personal data. We do not share it with third parties for marketing purposes. We may share it with:

Service providers that help us operate our business (e.g., email and scheduling tools), under contractual data protection obligations.
Competent authorities if required by Thai law.

7. Cookies

We use cookies to keep the site functioning and, with your consent, to understand how it is used. Please see our Cookie Policy for full details and to manage your preferences.

8. Security

We apply appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. Our team members are trained to handle personal information with discretion. In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authorities as required by the PDPA.

9. Your Rights Under the PDPA

As a data subject, you have the following rights:

Access: to request a copy of personal data we hold about you.
Rectification: to correct inaccurate or incomplete data.
Erasure: to request deletion of your data, subject to legal obligations.
Portability: to receive your data in a structured, machine-readable format.
Objection: to object to processing based on legitimate interests.
Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you believe we have not handled your data appropriately, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

10. Third-Party Links

Our website may contain links to external services. We are not responsible for the privacy practices of those services and encourage you to review their privacy policies independently.

11. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will notify clients of material changes by email or by displaying a notice on our website. The date at the top of this page reflects the most recent update.

13. Contact

For all privacy-related enquiries, including requests to exercise your rights:

Email: [email protected]
Address: 52 Ratchaphruek Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand