Privacy Policy

1. Introduction

Heirloomx ("we", "us", "our") is an education provider based in Bangkok, Thailand, offering courses and programs in family heirloom documentation and household record-keeping. We are committed to protecting the personal data of individuals who contact us, enrol in our courses, or visit our website.

This Privacy Policy explains what information we collect, how we use it, and the rights you have over your own data. It applies to all personal data collected through our website and through direct communication with us. If you have questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and telephone number (when provided through our enquiry form or direct communication).
• Enrolment information: name, contact details, and course selection when a participant registers for a course or program.
• Website usage data: anonymised browsing data via analytics cookies, if consent is given.
• Communication records: the content of emails or messages sent to us, retained for correspondence purposes.

Legal basis for processing: We process personal data on the basis of (a) your consent (for marketing communications and analytics cookies); (b) contractual necessity (to deliver courses you have enrolled in); and (c) legitimate interest (to respond to enquiries and manage course operations).

Retention: Contact enquiry data is retained for up to 12 months. Enrolment data is retained for the duration of the course plus three years for administrative records. You may request deletion at any time (see Section 6).

3. How We Use Your Data

• To respond to enquiries about our courses and programs.
• To process enrolments and communicate course logistics (dates, materials, session locations).
• To send monthly reading mailings to participants in the annual program.
• To improve our website and course content using anonymised analytics data.
• To meet legal or regulatory obligations applicable in Thailand.

We do not sell personal data to third parties. We do not use your data for advertising to you on external platforms.

Marketing communications: We will only send you non-essential communications (course announcements, new program notifications) if you have explicitly requested them. You may withdraw this consent at any time by writing to [email protected].

4. Data Protection Measures

• Access to personal data is restricted to staff directly involved in course delivery and administration.
• Email communications containing personal data are handled through encrypted mail services.
• Physical enrolment records are stored in a locked location at our Bangkok studio.
• In the event of a data breach involving your personal information, we will notify you within 72 hours if the breach presents a risk to your rights or interests.
• We review our data handling practices annually.

5. Cookies

Our website uses cookies for basic functionality and, where consent is given, for anonymised usage analytics. Cookie categories and controls are described in our Cookie Policy.

You may adjust your cookie preferences at any time via the Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), and where applicable under international frameworks including GDPR, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: Request your data in a structured, commonly used format.
• Right to object: Object to the processing of your data for legitimate interest purposes.
• Right to withdraw consent: Withdraw consent for processing based on consent at any time, without affecting prior processing.
• Right to lodge a complaint: You may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal information.

8. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will delete the data promptly.

9. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of our website or services following an update constitutes acceptance of the revised policy.

10. Contact

Data Controller: Heirloomx

76 Phaholyothin Soi 11, Samsen Nai, Phaya Thai, Bangkok 10400, Thailand

Email: [email protected]