Legal

Privacy Policy

Last updated: 1 May 2025 · Effective date: 1 May 2025

Heirloom Path ("we", "us", "our") is committed to handling personal information responsibly and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand. This Privacy Policy explains what data we collect, why we collect it, how it is used, and what rights you have over it.

This policy applies to all services offered by Heirloom Path, including the Family Heritage Reading Group, Object Stories Visit, and Family Year Annual Volume, as well as to this website.

Questions about this policy may be directed to [email protected].

1. Data We Collect

We collect personal data in the following ways:

Contact form submissions: name, email address, and optional phone number.
Service delivery: names, addresses, and correspondence provided when engaging our services; audio recordings and photographs taken during Object Stories Visits (with consent); written and photographic contributions submitted for Family Year Annual Volumes.
Website analytics: anonymised usage data (pages visited, session duration) via analytics cookies, if consent is given.
Cookies: essential cookies required for the site to function, and optional analytics and preference cookies with consent. See our Cookie Policy for full details.

We do not collect sensitive personal data (such as health, financial, or identification documents) unless explicitly provided by the participant as part of a family history contribution, in which case it is treated with the highest level of care and stored only for the duration of the relevant project.

2. Legal Basis for Processing

Consent: for optional cookies, marketing communications, and use of recordings or photographs in any context beyond the specific project for which they were created.
Contract performance: to deliver the service you have engaged us for (reading group sessions, home visits, annual volume production).
Legitimate interest: to respond to enquiries, maintain basic website security, and improve our services.

3. How We Use Your Data

To respond to enquiries submitted via the contact form.
To deliver reading group sessions, Object Stories Visits, and Annual Volume productions.
To produce audio files, printed catalogues, and printed volumes as agreed with participants.
To send service-related communications (session reminders, delivery notifications).
To improve our website and understand how visitors use it (analytics, with consent only).

We do not sell personal data to third parties. We do not use participant data for advertising purposes.

4. Data Retention

Contact form data: retained for 12 months from the date of submission, or until the enquiry is resolved, whichever is sooner.
Service project data (recordings, photographs, written contributions): retained only for the duration of the production period and up to 30 days after final delivery, then deleted or returned to the participant on request.
Correspondence: retained for 24 months in the ordinary course of business administration.
Analytics data: anonymised and retained in aggregate form only; no personally identifiable data is retained.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Secure file storage for all project materials during production.
Access controls limiting project data to the team members directly involved.
Encrypted transmission for any data sent digitally.
Prompt notification to affected participants in the event of a data breach.

6. Cookies

This website uses cookies. Essential cookies are required for basic site functionality and cannot be disabled. Optional cookies (analytics, marketing, preference) are used only with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights Under PDPA

Under the Personal Data Protection Act B.E. 2562 (Thailand), you have the following rights:

Right to access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data where there is no lawful basis for continued processing.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests.
Right to restrict processing: request that we limit how we use your data while a complaint is investigated.
Right to withdraw consent: withdraw any consent you have given at any time, without affecting processing already completed.
Right to lodge a complaint: with the Personal Data Protection Committee of Thailand if you believe your rights have not been respected.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

This website may contain links to external websites. Heirloom Path is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal information.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 without parental or guardian consent. Where a child's written or photographic contribution is included in a Family Year Annual Volume, the consent of a parent or guardian is required before that contribution is processed or printed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated by posting the updated policy on this page with a revised "Last Updated" date. Continued use of our services following notification of changes constitutes acceptance of the updated policy.

11. Contact

Data controller: Heirloom Path
Address: 41 Thong Lor Soi 10, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Email: [email protected]
Phone: +66 91 537 6248