Legal
Privacy Policy
Last Updated: 10 June 2025
Heritora ("we", "us", "our") is committed to protecting the personal information of everyone who contacts us or uses our services. This Privacy Policy explains what information we collect, how we use it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable regulations.
If you have questions about this policy, please contact us at [email protected].
1. Who We Are
Heritora is an estate organisation and heritage services provider based at 96 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand. We provide educational services, document organisation assistance, and heritage writing workshops. We are the data controller for all personal data collected through our website and services.
2. Data We Collect
Information you provide directly
- Name and contact details (email address, phone number)
- Enquiry content submitted through our contact form
- Information shared during sessions or consultations
Information collected automatically
- Browser type and device information
- Pages visited and time spent on our website
- IP address and approximate location
- Cookie preferences and consent records
3. How We Use Your Data
- Service delivery: To respond to enquiries and deliver the services you have engaged us for
- Communication: To contact you about session arrangements and follow-up
- Website improvement: To understand how our website is used and improve its content
- Legal compliance: To meet our obligations under Thai law
Legal basis for processing
We process your data on the basis of your consent (where given), the performance of a contract or pre-contractual steps, and our legitimate interests in operating and improving our services. Where we rely on consent, you may withdraw it at any time.
4. Data Retention
We retain enquiry and contact data for up to 12 months after last contact, unless you ask us to delete it sooner. Session-related information is retained for the duration of our engagement with you plus 12 months. Website analytics data is retained in aggregated form for up to 24 months.
5. Data Sharing
We do not sell personal data. We may share data with:
- Our web hosting provider (for operational purposes)
- Analytics tools (in aggregated or anonymised form)
- Authorities, if required by Thai law
We do not share identifiable personal data with third parties for marketing purposes.
6. Security
We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. This includes access controls, secure communication, and regular review of our data handling practices. In the event of a data breach affecting your rights, we will notify you in accordance with PDPA requirements.
7. Cookies
We use cookies to improve website functionality and understand usage patterns. Please see our Cookie Policy for details on cookie types, purposes, and how to manage your preferences.
8. Your Rights Under the PDPA
You have the following rights regarding your personal data:
- Right of access: To request a copy of the personal data we hold about you
- Right to rectification: To ask us to correct inaccurate or incomplete data
- Right to erasure: To request deletion of your data in certain circumstances
- Right to data portability: To receive your data in a structured, commonly used format
- Right to object: To object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, to withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you believe we have not handled your data correctly, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
9. Third-Party Links
Our website may contain links to external websites, including official Thai government information sources. We are not responsible for the privacy practices of third-party websites. We encourage you to review their policies before submitting personal information.
10. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information through our website, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. Continued use of our website or services after a policy update constitutes acceptance of the revised policy.
12. Contact
For any privacy-related questions or to exercise your data rights, please contact:
Heritora
96 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
Email: [email protected]
Phone: +66 74 503 8261