Privacy Policy

1. Introduction

Heirloomly ("we", "us", "our") is committed to protecting the personal information of the families and individuals who contact us or use our services. This policy explains what personal data we collect, why we collect it, how we use it and the rights you hold in relation to it. It applies to information collected through our website at heirloomly.sbs and through direct contact with us.

If you have questions about this policy, please write to us at [email protected].

2. Data We Collect

We collect only the personal data needed to respond to enquiries and deliver our services:

• Contact data: name, email address and telephone number when you submit an enquiry form or contact us directly.
• Service data: information you provide during service delivery, such as descriptions of documents or items to be organised or archived.
• Usage data: basic website analytics (pages visited, browser type) collected via cookies, if you consent.

We do not collect sensitive personal data such as financial account details, government identity numbers or health information unless you explicitly share such information with us as part of a service request.

3. Legal Basis for Processing

We process your personal data on the following bases under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand:

• Consent: for analytics cookies and optional marketing communications.
• Contract: to deliver services you have engaged us for.
• Legitimate interest: to respond to enquiries and maintain our service quality.

4. How We Use Your Data

• Responding to your enquiries and managing your service engagement
• Sending confirmation and project-related communications
• Improving our website and understanding how visitors use it (analytics only, with consent)
• Complying with legal obligations applicable in Thailand

We do not sell, rent or share your personal data with third parties for marketing purposes.

5. Data Retention

We retain contact and service data for a maximum of 24 months following the completion of a service engagement, or until you request deletion, whichever is sooner. Analytics data is retained for 12 months in aggregate, non-identifiable form.

6. Data Protection Measures

We use access controls, secure email communication and encrypted storage for any digital files held during a project. Physical documents are handled only by our staff and are not removed from your premises without explicit agreement. We do not retain digital copies of client files after project completion.

7. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. Please see our Cookie Policy for full details and preference controls.

8. Third-Party Services

Our website may use third-party analytics tools (such as Google Analytics, if enabled). These services have their own privacy policies and may set cookies. We do not control their data practices. Links to external websites are provided for information only — we are not responsible for the privacy practices of those sites.

9. Your Rights Under Thai PDPA

As a data subject under the Personal Data Protection Act B.E. 2562, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for cookie-based processing at any time

To exercise any right, contact us at [email protected]. We will respond within 30 days. You may also lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we hold data about a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The updated version will be posted at this URL with a revised "Last Updated" date. Continued use of our website after a change constitutes acceptance of the updated policy.

12. Contact

Data Controller: Heirloomly
42 Yaowarat Road, Samphanthawong, Bangkok 10100, Thailand
Email: [email protected]
Phone: +66 91 506 2837