Privacy Policy

1. Introduction

Heronest ("we", "us", "our") is committed to handling personal information responsibly and in accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to information collected through our website at heronest.live, through enquiry forms, and in the course of delivering our education and organisation programmes. Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect only what is needed to respond to enquiries and deliver our programmes. This may include:

• Name, email address, and phone number (submitted via contact forms or during booking)
• Information you share during sessions (if relevant to programme delivery)
• Technical data from website visits: IP address, browser type, pages visited, time spent (via analytics cookies, where consented)

We do not ask you to share sensitive financial or legal documents through our website or enquiry process.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA and general data protection principles:

• Consent: for marketing communications and optional analytics cookies
• Contract performance: to deliver the programme you have booked
• Legitimate interest: to respond to enquiries and improve our services

4. How We Use Your Information

• To respond to enquiries sent via our contact form
• To confirm bookings and deliver programmes
• To send information relevant to your booking (logistics, session notes)
• To improve our website and programme content using aggregated analytics data
• To contact you about future programmes, if you have consented to this

We do not sell, rent, or trade personal information to any third party for their own marketing purposes.

5. Data Retention

Enquiry information is retained for up to 12 months from the date of first contact. Programme participant records are retained for up to 3 years from the date of the programme, after which they are deleted or anonymised. You may request earlier deletion at any time (see Section 8).

6. Data Protection Measures

Personal data is stored on access-controlled systems. We apply reasonable technical and organisational measures to prevent unauthorised access, loss, or disclosure. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under Thai law.

7. Cookies

We use cookies to operate our website and, where you consent, to collect analytics information. Essential cookies cannot be disabled as they are necessary for basic site function. For full details, please read our Cookie Policy.

8. Your Rights

Under the PDPA, you have the following rights in relation to personal data we hold about you:

• Right of access: request a copy of the data we hold about you
• Right to rectification: ask us to correct inaccurate data
• Right to erasure: request deletion of your data (subject to legal retention obligations)
• Right to restrict processing: ask us to limit how we use your data
• Right to data portability: receive your data in a portable format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Third-Party Links

Our website may contain links to external websites, including government departments or specialist practitioners. We are not responsible for the privacy practices of those sites. We encourage you to read their policies before sharing personal information.

10. Children's Privacy

Our programmes and website are intended for individuals 18 years and older. We do not knowingly collect personal information from minors. If you believe a minor has provided information to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this policy as our practices change or as required by law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any questions about this policy or our data handling practices, please contact:

Heronest
175 Phaholyothin Road, Sam Sen Nai, Bangkok 10400, Thailand
[email protected]
+66 2 739 5186