Privacy Policy

1. Introduction

Hearthline ("we", "us", "our") is committed to handling your personal information with care, discretion, and in full compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA 2019) and applicable data protection standards.

This policy explains what personal data we collect, why we collect it, how it is used and protected, and what rights you have in relation to it. It applies to all individuals who use our website at hearthlineex.biz, enquire about our services, or engage with Hearthline directly.

If you have any questions about this policy, please contact us at [email protected].

2. What Personal Data We Collect

We collect personal data only when it is necessary to provide our services or respond to your enquiries. The types of data we may collect include:

• Contact information — name, email address, and telephone number, provided through our contact form or during session bookings.
• Enquiry content — the message or details you provide when contacting us about a session or service.
• Website usage data — standard technical data such as IP address, browser type, and pages visited, collected via cookies and analytics tools.

Legal basis for processing: We process personal data on the basis of your consent (when you submit a form), performance of a service agreement (when a session is booked), and our legitimate interest in operating and improving our services.

Retention: Contact and enquiry data is retained for up to 24 months from the date of last contact. Website analytics data is retained in accordance with the terms of our analytics provider, typically up to 26 months.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to your enquiries and booking session appointments
• Delivering and administering our services
• Sending you session confirmations, reminders, and follow-up information
• Analysing website usage to improve our content and services
• Complying with applicable Thai legal and regulatory requirements

We do not sell, rent, or trade your personal data with third parties for marketing purposes. Data may be shared with trusted service providers (such as email delivery or analytics platforms) solely to support our operations, under contractual data processing agreements.

4. How We Protect Your Data

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure:

• Website data is transmitted over HTTPS (TLS encryption)
• Access to stored personal data is restricted to authorised team members only
• Physical session documents are stored securely and disposed of appropriately when no longer needed
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority in accordance with PDPA requirements

5. Cookies

Our website uses cookies to remember your preferences and to understand how visitors use the site. Essential cookies are required for basic site functionality. Optional cookies (analytics and preference cookies) are only placed with your consent.

For full details, including how to manage your cookie preferences, please see our Cookie Policy.

6. Your Rights

Under the Thailand Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete data.
• Right to erasure — you may request deletion of your data where there is no longer a lawful basis for us to hold it.
• Right to data portability — you may request your data in a structured, machine-readable format.
• Right to object — you may object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external websites, including official Thai government portals and community organisations. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies separately before sharing any personal information.

8. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us immediately at [email protected] and we will take steps to remove it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are published constitutes acceptance of the updated policy. For significant changes, we will endeavour to notify registered contacts directly.