Privacy Policy

1. Who We Are

Hearthline is a family communication and records organisation service based at 82 Thanon Phra Athit, Chana Songkhram, Phra Nakhon, Bangkok 10200, Thailand. We operate as the data controller for personal information collected through this website and our service engagements.

For privacy-related questions, contact us at: [email protected]

2. What Personal Data We Collect

We collect the following types of personal information:

• Contact details: name, email address, and phone number (where provided) via our website contact form
• Communication content: the content of any messages submitted through our contact form
• Session-related information: notes taken during facilitation or workshop sessions, held internally and not shared with third parties
• Technical data: IP address, browser type, and pages visited, collected via cookies and analytics tools (see our Cookie Policy)

We do not collect sensitive personal data (such as health information, financial data, or government identification numbers) through this website.

3. How and Why We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries submitted via our contact form
• To schedule and manage service bookings
• To send confirmations, summaries, and follow-up communications related to sessions
• To improve the usability and content of our website (via analytics)
• To comply with our obligations under Thai law

Legal basis for processing (PDPA, Thailand):

• Consent: where you have provided information voluntarily via our contact form
• Legitimate interests: website analytics and service improvement
• Contractual necessity: managing confirmed service bookings

4. Data Retention

We retain personal data for the following periods:

• Contact form enquiries: up to 12 months from the date of submission
• Session records (internal): up to 24 months from the date of the session
• Technical/analytics data: in aggregate form, up to 26 months

After these periods, data is deleted or anonymised. You may request earlier deletion — see Section 7.

5. Data Sharing

We do not sell or rent personal data. We may share data with:

• Email and website service providers who process data on our behalf under appropriate data processing agreements
• Analytics providers (in anonymised or aggregated form)
• Thai regulatory or law enforcement authorities, where required by law

We do not transfer personal data outside of Thailand except where service providers process data under adequate protections consistent with the PDPA.

6. Data Protection Measures

We take reasonable steps to protect personal information from unauthorised access, loss, or misuse:

• Website data is transmitted over secure HTTPS connections
• Access to internal session records is restricted to relevant staff only
• We review our data practices periodically to identify and address risks
• In the event of a data breach that may affect your rights, we will notify you and the relevant Thai authority as required by the PDPA

7. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request deletion or restriction of processing
• Object to processing based on legitimate interests
• Request data portability (where technically feasible)
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses cookies to keep things running and to understand how pages are used. For full details on the types of cookies we use and how to manage them, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

10. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. Continued use of our website after changes are posted constitutes acceptance of the updated policy. We recommend checking this page periodically.

12. Contact for Privacy Matters

For any privacy-related questions or requests, please contact:

• Email: [email protected]
• Address: 82 Thanon Phra Athit, Chana Songkhram, Phra Nakhon, Bangkok 10200, Thailand
• Phone: +66 2 489 3072