Legal

Privacy Policy

Last Updated: 10 May 2025  |  Effective Date: 10 May 2025

Heirly (referred to as "we", "us", or "our") is committed to protecting the privacy of families and individuals who engage with our educational and administrative programs. This policy explains what personal data we collect, how we use it, and what rights you hold. Our services are provided from Chiang Mai, Thailand, and we operate under the requirements of the Thai Personal Data Protection Act B.E. 2562 (PDPA 2019). Families from the European Economic Area are additionally supported by GDPR-aligned handling procedures.

1. Data We Collect

When you enquire or enrol in a program, we may collect:

We do not collect sensitive categories of personal data (such as financial records or health data) and we do not receive or store copies of any family documents — those belong entirely to you.

2. How We Use Your Data

We do not use your data for marketing without your explicit consent, and we do not sell or share personal data with third parties for commercial purposes.

3. Legal Basis for Processing

Under the Thai PDPA and, where applicable, GDPR, we process personal data on the following bases:

4. Data Retention

We retain enquiry records for up to 12 months after last contact. Program participation records are kept for up to 3 years for administrative purposes. You may request deletion at any time (see Your Rights below). Analytics data is aggregated and anonymised, and is not subject to individual deletion requests.

5. Data Protection Measures

6. Cookies

We use cookies on this website for essential functionality and optional analytics. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.

7. Third-Party Services

We may use third-party services for website analytics (such as Google Analytics) or communication tools. These services operate under their own privacy policies and we encourage you to review them. We do not share personal information with third parties for their own marketing purposes.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

8. Your Rights

Under the Thai PDPA, and where applicable GDPR, you have the right to:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our programs are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us and we will remove it promptly.

10. Policy Updates

We may update this policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Continued use of our website or programs following any update constitutes acceptance of the revised policy.

Contact Us Regarding Privacy

For any data-related enquiries, requests, or concerns, please contact:

Heirly

[email protected]

81 Loi Kroh Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand