Privacy Policy

1. Introduction

Hearthline ("we", "us", "our") is committed to handling personal information responsibly and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable international standards.

This Privacy Policy applies to all individuals who visit our website at hearthlinefx.world, enquire about our services, or attend our workshops and sessions. It covers how we collect, use, store, share, and protect your data.

If you have any questions about this policy, please contact us at [email protected].

2. Data Collection

We may collect the following categories of personal information:

• Contact details: name, email address, phone number — provided when you complete our enquiry form or register for a workshop.
• Communication records: messages you send us and notes from any follow-up conversations.
• Technical data: IP address, browser type, pages visited, and time of visit, collected via cookies and server logs.
• Payment information: where applicable, processed securely through a third-party payment provider; we do not store card details.

Legal Basis for Processing

• Consent: when you submit an enquiry form or opt in to communications.
• Contractual necessity: when processing is required to deliver a service you have requested.
• Legitimate interests: for website security, fraud prevention, and improving our services.

Data Retention

Enquiry and contact records are retained for up to 24 months from the date of last contact. Workshop attendance records are kept for up to 36 months. Technical logs are retained for up to 12 months.

3. How We Use Your Data

Personal information collected is used solely for the following purposes:

• Responding to your enquiries and providing information about our workshops and services.
• Scheduling sessions and coordinating with participants.
• Sending relevant service-related communications (not unsolicited marketing).
• Improving our website, content, and service offerings based on aggregate usage patterns.
• Complying with legal or regulatory obligations as required by Thai law.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Data Sharing

We may share personal data with the following categories of parties only as necessary:

• Service providers: platforms used for email communications, scheduling, and website hosting, who are contractually bound to protect your data.
• Analytics providers: anonymised or aggregated data may be shared with web analytics tools to help us understand site usage.
• Legal and regulatory authorities: when required to comply with applicable law, court orders, or regulatory requirements in Thailand.

All third-party processors we use are selected with care and are required to maintain appropriate data protection standards.

5. Data Protection Measures

We take the security of your personal information seriously and have put the following measures in place:

• Secure, encrypted connections (HTTPS/TLS) for data transmission across our website.
• Access to personal data restricted to staff with a legitimate need, governed by internal access control policies.
• Regular review of our data handling practices and third-party relationships.
• In the event of a data breach, we will notify affected individuals and relevant authorities in accordance with the PDPA where required.

6. Cookies

Our website uses cookies — small text files stored on your device — to support basic site functionality and understand how visitors use the site. We use:

• Essential cookies: required for the site to function correctly. These cannot be disabled.
• Analytics cookies: help us understand visitor behaviour in aggregate, used only with your consent.
• Preference cookies: remember your cookie choices so you are not asked repeatedly.

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under the PDPA and applicable data protection principles, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Data portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent at any time where processing is based on consent, without affecting earlier processing.
• Lodge a complaint: contact the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have not been respected.

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites for reference. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policy of any external site you visit.

9. Children's Privacy

Our services and website are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that data has been submitted by a minor, it will be removed promptly. If you believe a minor has submitted information to us, please contact us so we can address it.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website after any update constitutes acceptance of the revised policy.

11. Contact — Data Enquiries

For any questions relating to this Privacy Policy, data access requests, or to exercise your rights, please contact us:

• [email protected]
• +66 2 540 6193
• 58 Ratchaprarop Road, Ratchathewi, Bangkok 10400, Thailand