Privacy Policy

1. Introduction

Hearthand ("we", "us", "our") is committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and related legislation.

This policy applies to all information collected through our website at hearthand.pro, through enquiry forms, and in connection with our family communication and coordination services.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

Information you provide directly:

• Full name and contact details (email address, phone number)
• Family context shared during enquiries or session booking
• Messages submitted through our contact form
• Optional information shared during service delivery

Information collected automatically:

• Website usage data (pages visited, time spent) via analytics cookies where consent is given
• Technical data (browser type, device type, approximate location from IP address)
• Cookie preferences and consent records

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases:

• Consent: Where you have provided explicit consent (e.g. cookie preferences, newsletter sign-up if applicable)
• Contract performance: To deliver the services you have engaged us for
• Legitimate interest: To respond to enquiries, improve our service, and communicate with existing clients
• Legal obligation: Where required by Thai law or regulation

We use your data to: respond to enquiries, schedule and deliver sessions and programmes, send relevant service communications, improve our website and offerings, and fulfil legal and regulatory obligations.

4. Data Retention

We retain contact enquiry data for up to 12 months. Data related to active service engagements is retained for the duration of the programme plus three years, in line with standard business record-keeping. Analytics data is retained in aggregated form. You may request deletion at any time (see Section 7).

5. Data Sharing

We do not sell your personal data. We may share it in limited circumstances:

• Service providers: Trusted third parties who help us operate (e.g. website hosting, email delivery), bound by data processing agreements
• Analytics: Where consent is given, anonymised usage data may be processed by analytics services such as Google Analytics
• Legal requirements: Where disclosure is required by law, court order, or regulatory authority in Thailand
• Session content: Notes or summaries from facilitated sessions are only shared with parties explicitly agreed at the time by the family involved

6. Data Security

We use reasonable technical and organisational measures to protect your personal data, including encrypted data storage, access controls, and secure communication channels. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant Thai supervisory authority as required under the PDPA.

7. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: Request a copy of personal data we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where legally applicable
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing
• Right to lodge a complaint: With the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use cookies to understand how our website is used and to improve your experience. Essential cookies are required for the site to function. Optional cookies (analytics, marketing, preference) are only set with your consent. For full details, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies directly.

10. Children's Privacy

Our services are directed at adults (aged 18 and over). We do not knowingly collect personal data directly from children. Where a session involves children as family members, data relating to them is processed only with the consent of a parent or guardian.

11. Updates to This Policy

We may update this policy from time to time. Where changes are material, we will notify existing clients by email. Continued use of our services after an update constitutes acceptance of the revised policy. The date at the top of this page reflects the most recent revision.

12. Contact Us

Data Controller: Hearthand
Address: 67 Thanon Phuket, Talat Yai, Mueang, Phuket 83000, Thailand
Privacy enquiries: [email protected]
General: [email protected]