Legal
Privacy Policy
Last Updated: 20 April 2025 · Effective: 20 April 2025
This policy applies to Heritage Compass ("we", "us", "our"), a document-organisation and educational services provider registered in Chiang Mai, Thailand. It explains what personal data we collect, why, and how we protect it — in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Who We Are (Data Controller)
Heritage Compass is the data controller responsible for personal data collected through this website and during the delivery of our services. Our registered address is 63 Charoenrat Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand. For privacy-related enquiries, please write to [email protected].
2. What Personal Data We Collect
Data collected through the contact form
- Full name (required)
- Email address (required)
- Telephone number (optional)
- Message content (optional)
Data collected automatically
- Browser type and version
- Approximate geographic location (country/city level, from IP address)
- Pages visited and time spent (via analytics cookies, if consent given)
- Device type and operating system
Data collected during service delivery
During home-based sorting sessions, we produce a printed index of folder categories and headings. This index contains no sensitive personal information — only folder names and general categories agreed with the client. The printed index is handed to the client at the end of the session and no copy is retained by Heritage Compass unless the client explicitly requests otherwise.
3. Legal Basis for Processing
- Contract performance: processing your contact enquiry and delivering the agreed service
- Legitimate interests: maintaining records of completed sessions for quality review purposes (retained for 24 months)
- Consent: analytics and marketing cookies (you may withdraw consent at any time via our cookie settings)
- Legal obligation: retaining financial records as required under Thai law
4. How We Use Your Data
- Responding to enquiries submitted through the contact form
- Arranging and confirming service bookings
- Sending follow-up communications within 48 hours of a completed session
- Dispatching reading bundle subscription parcels to the address provided
- Conducting internal quality review of completed sessions
- Improving website content and user experience (analytics, with consent)
We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.
5. Data Sharing
We share personal data only where necessary:
- Postal/courier services: name and address shared to dispatch reading bundle parcels
- Website hosting provider: contact form data is processed on a server operated by our hosting provider, bound by a data processing agreement
- Analytics provider (Google Analytics): anonymised usage data, only if analytics cookies are accepted
All third-party processors are contractually bound to handle data in accordance with applicable law and to use it only for the specified purpose.
6. Data Retention
- Contact form enquiries: 12 months from date of last communication
- Session records (internal quality notes, not session content): 24 months from session date
- Subscription delivery records: 36 months for accounting purposes
- Analytics data: 14 months (Google Analytics default)
After the relevant retention period, personal data is deleted or anonymised.
7. Data Protection Measures
- Website traffic is encrypted via HTTPS (TLS)
- Access to personal data is restricted to authorised Heritage Compass staff only
- Contact form submissions are stored on a password-protected server
- Physical records (such as booking notes) are kept in a locked cabinet on our premises
- In the event of a data breach affecting your rights, we will notify the affected individuals and (where required) the relevant supervisory authority within 72 hours of becoming aware
8. Cookies
We use essential cookies to maintain basic site functionality, and optional analytics and preference cookies where you have given consent. Full details of the cookies we use, including how to manage your preferences, are set out in our Cookie Policy.
9. Your Rights Under the PDPA
As a data subject under Thailand's Personal Data Protection Act, you have the following rights:
- Right to access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data (subject to legal retention obligations)
- Right to restriction: request that we limit processing of your data in certain circumstances
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, write to [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
10. Third-Party Links
Our website may contain links to external resources (educational publishers, public information bodies). Heritage Compass is not responsible for the privacy practices of those sites and recommends reviewing their own privacy policies before submitting personal data.
11. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through our website, please contact us at [email protected] and we will delete it promptly.
12. International Transfers
Heritage Compass is based in Thailand and processes data primarily within Thailand. Where data is processed by third-party service providers outside Thailand (such as Google Analytics), we ensure that appropriate safeguards are in place in accordance with the PDPA's provisions on cross-border transfers.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will be updated accordingly. Continued use of the website after a policy update constitutes acceptance of the revised policy. For significant changes, we will provide a notice on the website homepage for 30 days.
14. Contact for Privacy Matters
Heritage Compass
63 Charoenrat Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand
Email: [email protected]
Tel: +66 87 916 3254