Legal
Privacy Policy
Last Updated: 10 May 2025 | Effective Date: 10 May 2025
Heirly (referred to as "we", "us", or "our") is committed to protecting the privacy of families and individuals who engage with our educational and administrative programs. This policy explains what personal data we collect, how we use it, and what rights you hold. Our services are provided from Chiang Mai, Thailand, and we operate under the requirements of the Thai Personal Data Protection Act B.E. 2562 (PDPA 2019). Families from the European Economic Area are additionally supported by GDPR-aligned handling procedures.
1. Data We Collect
When you enquire or enrol in a program, we may collect:
- Full name and email address (required for contact and program administration)
- Phone number (optional, used only if you initiate a call or request one)
- Brief description of your family situation (provided voluntarily in the enquiry form)
- Technical data including IP address, browser type, and pages visited (via analytics cookies)
We do not collect sensitive categories of personal data (such as financial records or health data) and we do not receive or store copies of any family documents — those belong entirely to you.
2. How We Use Your Data
- Program administration: To respond to enquiries, schedule sessions, and deliver program materials.
- Communication: To follow up after sessions and provide program-related information.
- Website improvement: Aggregated, anonymised analytics data helps us understand how visitors use our site so we can improve it.
- Legal compliance: Where required by Thai law or relevant regulations.
We do not use your data for marketing without your explicit consent, and we do not sell or share personal data with third parties for commercial purposes.
3. Legal Basis for Processing
Under the Thai PDPA and, where applicable, GDPR, we process personal data on the following bases:
- Consent: For optional communications and analytics cookies.
- Contract performance: For program delivery to enrolled participants.
- Legitimate interest: For responding to enquiries and improving our programs.
4. Data Retention
We retain enquiry records for up to 12 months after last contact. Program participation records are kept for up to 3 years for administrative purposes. You may request deletion at any time (see Your Rights below). Analytics data is aggregated and anonymised, and is not subject to individual deletion requests.
5. Data Protection Measures
- All electronic data is stored on password-protected, access-controlled systems.
- Website connections are encrypted via HTTPS/TLS.
- Internal access to personal data is limited to staff directly involved in program delivery.
- We review our data handling practices regularly and update procedures when necessary.
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under applicable law.
6. Cookies
We use cookies on this website for essential functionality and optional analytics. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.
7. Third-Party Services
We may use third-party services for website analytics (such as Google Analytics) or communication tools. These services operate under their own privacy policies and we encourage you to review them. We do not share personal information with third parties for their own marketing purposes.
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.
8. Your Rights
Under the Thai PDPA, and where applicable GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data (subject to legal retention requirements)
- Object to or restrict certain processing activities
- Withdraw consent at any time without affecting prior processing
- Lodge a complaint with the Personal Data Protection Committee of Thailand or, if applicable, your national data protection authority
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Children's Privacy
Our programs are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us and we will remove it promptly.
10. Policy Updates
We may update this policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Continued use of our website or programs following any update constitutes acceptance of the revised policy.
Contact Us Regarding Privacy
For any data-related enquiries, requests, or concerns, please contact:
Heirly
81 Loi Kroh Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand