Legal Document
Privacy Policy
Last updated: 10 June 2025 · Effective date: 10 June 2025
1. Introduction
Heirwell ("we", "us", "our") is committed to handling the personal information you share with us with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.
This policy applies to all personal data processed by Heirwell in connection with our estate and legacy information sessions, our website, and our general correspondence. It covers information provided by individuals and families who enquire about or attend our sessions.
Our services are general information and facilitation only. We do not provide legal, financial, or tax advice. However, the personal information you share with us — such as your name, contact details, and the context of your family or business situation — is handled with the same level of care regardless.
If you have questions about this policy, please contact us at [email protected].
2. Personal Data We Collect
We collect the following categories of personal data:
- Contact information: Your name, email address, and telephone number when you submit an enquiry form or contact us directly.
- Session context: Information you share in our pre-session intake process, including general background about your family or business situation. This helps us prepare an appropriate session for you.
- Correspondence: Any messages, emails, or notes exchanged before, during, or after a session.
- Website data: Standard analytics data including pages visited, browser type, and approximate location, collected via cookies where consent has been given.
We collect this data directly from you through our contact form, email correspondence, telephone calls, and our pre-session intake process. We do not collect sensitive personal data (as defined under Thai personal data protection law) and ask participants not to share medical, financial account, or similar sensitive information in session context forms.
Legal basis for processing: We process your data on the basis of your consent (where you have provided it), the performance of a service you have requested, or our legitimate interest in operating and improving our sessions.
Retention: Contact and session intake data is retained for up to 24 months from your last interaction with us. Website analytics data is retained for up to 12 months. You may request deletion at any time.
3. How We Use Your Personal Data
We use personal data for the following purposes:
- To respond to your enquiry and discuss session options with you
- To prepare and personalise sessions based on your intake information
- To communicate with you before, during, and after a session
- To send session notes and resource summaries after your session
- To respond to follow-up questions you raise after your session
- To maintain records of our engagements for internal administration
- To improve our sessions and service quality
We do not use your personal data for automated decision-making. We do not use session intake information or session notes for any purpose other than preparing and conducting your session and related follow-up.
Marketing: We do not send marketing communications without your explicit consent. If you would like to hear about future sessions or updates, you may opt in when making an enquiry. You may withdraw that consent at any time by emailing [email protected].
Third-party sharing: We do not sell or share your personal data with third parties for their marketing purposes. We may share data with service providers who assist us in operating our website (such as hosting and analytics providers) under appropriate data processing agreements.
4. How We Protect Your Data
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:
- Encrypted storage and transmission of personal data
- Access controls limiting data to staff who need it for session preparation and administration
- Regular review of data storage practices
- Secure deletion of data beyond its retention period
In the event of a data breach that may affect your personal data, we will notify you and, where required, the relevant Thai authorities in accordance with the Personal Data Protection Act B.E. 2562 (2019).
5. Cookies
Our website uses cookies to function properly and, where you consent, to collect analytics data. Essential cookies are necessary for the website to work and cannot be disabled. Optional analytics and preference cookies are only set with your consent.
For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
6. Your Rights
Under the Thai Personal Data Protection Act B.E. 2562 (2019) and applicable law, you have the following rights:
- Access: The right to request a copy of the personal data we hold about you.
- Rectification: The right to request correction of inaccurate or incomplete personal data.
- Erasure: The right to request deletion of your personal data, subject to any legal obligations we may have to retain it.
- Restriction: The right to request that we limit how we process your data in certain circumstances.
- Portability: The right to receive your data in a structured, commonly used format where technically feasible.
- Objection: The right to object to processing based on legitimate interest.
- Withdrawal of consent: The right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Committee of Thailand.
7. Third-Party Links
Our website and session materials may contain links to external websites, official government resources, or professional directories. These are provided for reference only. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies independently.
8. Children's Privacy
Our sessions are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data relating to a person under 18, please contact us so we can delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document. If changes are significant, we will notify you by email where we hold your contact details. Continued use of our services after the effective date of any changes constitutes acceptance of the updated policy.
10. Contact for Data Enquiries
For any questions about this policy or how we handle your data, please contact:
Heirwell
52 Surasak Road, Si Racha, Chonburi 20110, Thailand
Email: [email protected]
Phone: +66 91 247 8635