Privacy Policy

1. Introduction

Hearthline ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect from people who attend our workshops, book our sessions, use our website, or become Community Members, and how we use and protect it.

Our services are based in Chiang Rai, Thailand, and we operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Where participants are residents of other jurisdictions, we apply reasonable equivalent standards.

Questions about this policy can be directed to [email protected].

2. What Data We Collect

We collect only the personal data necessary to deliver our services and communicate with participants. This includes:

• Name — provided when booking or enquiring
• Email address — for booking confirmation and session follow-ups
• Phone number — optionally provided; used for booking coordination only
• Message content — enquiries submitted through our contact form
• Website usage data — collected via cookies and analytics tools (see Section 5)

Data is collected when you submit our contact form, register for a session, or browse our website. The legal basis for processing is your consent (where given), our legitimate interest in operating our educational services, and the performance of our service agreement with you.

We retain personal contact data for up to 24 months after your last interaction with us, unless a longer period is required by applicable law.

3. How We Use Your Data

We use personal data for the following purposes:

• Confirming and administering session bookings
• Sending session-related information and follow-up materials
• Responding to enquiries submitted through our website
• Managing Community Membership access and communications
• Improving our website and session offerings through anonymised analytics

We do not sell personal data to third parties. We do not share personal data with marketing partners. We may share data with service providers (such as email delivery platforms) where necessary for operations, under data processing agreements.

If you are a Community Member, we may contact you with information about upcoming workshops and new resources. You may opt out of these communications at any time by replying to any email or contacting us at [email protected].

4. How We Protect Your Data

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure. Measures include:

• HTTPS encryption for all website traffic
• Access to personal data limited to relevant team members
• Secure email practices for all participant communications
• Regular review of data storage and access arrangements

In the event of a data breach that may affect your rights, we will notify you and relevant authorities as required under Thai PDPA provisions, within the timeframes prescribed by law.

5. Cookies

Our website uses cookies to support basic functionality and, where you consent, to collect anonymous analytics data. Cookie types used include essential cookies (always active) and optional analytics and preference cookies (active only with your consent).

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable international standards, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data, subject to applicable legal obligations
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) or the relevant data protection authority in your country of residence.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before sharing any personal information.

8. Children's Privacy

Hearthline's services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has submitted data to us, we will delete it promptly.

9. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will change. Where changes are significant, we will notify active participants by email. Continued use of our services after an update constitutes acceptance of the revised policy.