Privacy Policy

1. Introduction

Hearthlink ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our services. This policy explains what information we collect, why we collect it, how we use it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection principles.

If you have any questions about this policy, please contact us at [email protected].

2. Who We Are

Hearthlink provides family life administration and communication support services. We are based at 71 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand. We are the data controller for the personal data described in this policy.

3. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number (optional), and message content.
• Session bookings: name, email address, phone number, and information about the programme you are enquiring about.
• Website usage data: anonymous analytics data including pages visited, time on site, and browser type, collected through cookies if you consent to analytics cookies.
• Communications: emails and messages you send us directly.

We do not collect sensitive personal data (such as health information, financial details, or government identity numbers) through our website.

4. How We Use Your Data

We use personal data for the following purposes:

• Responding to your enquiries and booking requests.
• Delivering the sessions and programmes you have booked.
• Sending you session summaries and take-home materials after a programme.
• Communicating with you about your booking, including any necessary follow-up.
• Improving our website through anonymous analytics data (only with your consent).

We do not use your personal data for automated decision-making. We do not sell your data to third parties. We do not use your contact details for unsolicited marketing communications.

5. Legal Basis for Processing

We process personal data on the following legal bases:

• Contractual necessity: to deliver services you have engaged us to provide.
• Legitimate interests: to respond to enquiries from people who contact us.
• Consent: for optional analytics cookies, where you have actively given consent through our cookie banner.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected. Specifically:

• Enquiry data: retained for 12 months from the date of last contact.
• Session records: retained for 3 years for quality assurance and follow-up support purposes.
• Analytics data: retained in anonymised form in line with the analytics platform's standard retention settings.

After the applicable retention period, data is securely deleted or anonymised.

7. Third-Party Services

We use a small number of third-party services to operate our website and communications. These may process data on our behalf:

• Web hosting and email delivery providers.
• Optional analytics services (only if you consent to analytics cookies).

We do not share your personal data with advertising networks. We do not share your data with social media platforms except through any sharing you initiate yourself.

8. Cookies

We use cookies on our website. Essential cookies are required for the site to function and are always active. Optional analytics and preference cookies are only set with your consent. For full details, see our Cookie Policy.

9. Your Rights Under PDPA

Under Thailand's PDPA (and applicable international data protection laws for users outside Thailand), you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data, subject to our legal obligations.
• Right to portability: request your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw cookie consent at any time through our Cookie Policy page.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, and misuse. These include access controls, secure data transmission (HTTPS), and internal data handling protocols. In the event of a data breach that poses a risk to individuals, we will notify the relevant authorities and affected individuals as required by applicable law.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their individual privacy policies.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised date at the top. Continued use of our services after a policy update constitutes acceptance of the revised terms.

14. Contact and Supervisory Authority

For any privacy-related questions or concerns, contact us at:
Email: [email protected]
Address: 71 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee of Thailand (PDPC) or, if you are located in the European Economic Area, with your local supervisory authority.