Privacy Policy

Introduction

Heirloomly ("we", "us", "our") is committed to handling the personal information of everyone who contacts us or uses our services with care and respect. This Privacy Policy explains what information we collect, how we use it, how long we keep it and what rights you have in relation to it.

Our services are provided from our office at 22/5 Ratchadamnoen Road, Si Phum, Mueang Chiang Mai, Chiang Mai 50200, Thailand. Questions about this policy may be directed to [email protected].

What Personal Data We Collect

We collect personal data in the following circumstances:

• When you fill in the contact form on our website: your name, email address and, if provided, your phone number and message
• When you telephone us: your phone number and the details of your enquiry
• When you engage us for a service: your name, contact details, address and information relevant to the scope of work
• When you visit our website: usage data collected via cookies (see our Cookie Policy)

We do not collect sensitive personal data unless it is directly necessary for a specific engagement and you have explicitly provided it. We do not copy, retain or store client documents or household papers — all such materials remain in the client's possession at all times.

Legal Basis for Processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, GDPR:

• Consent: for marketing communications and cookie use where you have provided consent
• Contractual necessity: to carry out services you have engaged us to provide
• Legitimate interests: for enquiry handling and service administration

How We Use Your Data

• To respond to your enquiry
• To arrange and carry out sessions you have booked
• To send service-related communications (confirmation, follow-up notes, invoices)
• To improve our website and services using anonymised analytics

We do not use your data for automated decision-making. We do not sell your personal data to third parties.

Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• With service providers who assist in operating our website (hosting, analytics) under appropriate data processing agreements
• Where required by law or by a competent Thai regulatory authority

Data Retention

Enquiry data (contact form submissions, email correspondence) is retained for up to 24 months from the date of last contact. Client engagement records are retained for up to 5 years for administrative and accounting purposes, after which they are securely deleted. You may request earlier deletion — see Your Rights below.

Data Protection Measures

• All digital records are stored on password-protected, access-controlled systems
• Physical documents handled during sessions remain with the client at all times and are not taken off site
• Staff with access to personal data are bound by confidentiality obligations
• We review our data handling practices periodically

Cookies

Our website uses cookies to support basic site functionality and to understand how visitors use the site. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights

Under the Thai PDPA and applicable international standards, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legitimate retention requirements)
• Object to or restrict the processing of your data
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of the page. Continued use of our website or services following a change constitutes acceptance of the updated policy.

Contact

For any questions about this policy or about how we handle your data:

• Email: [email protected]
• Address: 22/5 Ratchadamnoen Road, Si Phum, Mueang Chiang Mai, Chiang Mai 50200, Thailand
• Phone: +66 53 418 762