Privacy Policy

1. Introduction

Heirloom Desk ("we", "us", "our") is committed to handling personal information with care and respect. This Privacy Policy explains how we collect, use, store, and protect the personal data of people who enquire about or use our document organisation and information services in Bangkok, Thailand.

This policy applies to all personal data collected through our website at https://heirloomdesk.live, by telephone, by email, and during service delivery. It should be read alongside our Terms & Conditions and Cookie Policy.

If you have questions about this policy, please contact us at [email protected].

2. What Personal Data We Collect

We collect only the personal data necessary to provide our services and respond to enquiries. This may include:

• Full name
• Email address
• Telephone number
• Home or business address (if a home visit is requested)
• Details you share in messages or during sessions

How data is collected: Through our website contact form, by telephone, by email, and — where applicable — in person during service delivery.

Legal basis for processing: We process personal data on the basis of your consent (when you submit a form or make an enquiry), and on the basis of legitimate interest in delivering and improving our services.

Retention: Enquiry data is held for up to 24 months. Data related to delivered services is held for up to 36 months, after which it is securely deleted unless we are required to retain it by law.

3. How We Use Your Data

Personal data collected by Heirloom Desk is used for the following purposes:

• Responding to your enquiry or service request
• Scheduling and delivering sessions, workshops, or membership materials
• Sending follow-up information you have requested
• Maintaining records related to service delivery
• Improving the quality and content of our services

Marketing: We do not send unsolicited marketing communications. If you wish to receive general updates from Heirloom Desk, you may opt in when making an enquiry. You may opt out at any time by emailing [email protected].

Data sharing: We do not sell or rent personal data to third parties. Data may be shared with trusted service providers (such as email hosting) solely for operational purposes, under confidentiality agreements.

4. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse. These measures include:

• Secure, password-protected systems for storing client records
• Restricted access to personal data — only team members who need it for service delivery
• Encrypted email communications where possible
• Physical documents handled discreetly and not retained after sessions

In the event of a data breach that affects your rights or interests, we will notify you and the relevant authority in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

5. Cookies

Our website uses cookies to maintain basic site functionality and, where you have consented, for analytics purposes. Essential cookies cannot be disabled as they are necessary for the site to operate.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act (PDPA B.E. 2562), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To ask us to correct inaccurate or incomplete data
• Right to erasure: To request that we delete your personal data, subject to legal obligations
• Right to data portability: To receive your data in a structured, commonly used format
• Right to object: To object to processing based on legitimate interest
• Right to withdraw consent: At any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external websites for reference purposes. Heirloom Desk is not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated date at the top. We encourage you to review this policy periodically. Continued use of our services after changes are published constitutes acceptance of the updated policy.

10. Contact for Privacy Matters

Data Controller: Heirloom Desk

65 Maha Rat Road, Phra Nakhon, Bangkok 10200, Thailand

Privacy enquiries: [email protected]

General enquiries: [email protected]

Telephone: +66 84 271 6839