Privacy Policy

1. Introduction

Legacium ("we", "us", "our") is an educational programme provider based at 61 Ratchaphruek Road, Taling Chan, Bangkok 10170, Thailand. We offer seminars and workshops on estate organisation and family record-keeping for individuals and family-run businesses.

This Privacy Policy describes how we process personal data in connection with our website and enquiry process. We are committed to handling your information with care and transparency, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable legislation.

2. Data We Collect

We may collect the following categories of personal data:

• Contact details — your name, email address, and telephone number when provided through our enquiry form.
• Enquiry content — any message or description of your needs that you choose to share with us.
• Technical data — browser type, IP address, referring URL, and pages visited, collected via cookies and server logs.
• Cookie preferences — your consent choices stored locally in your browser.

We do not collect sensitive categories of personal data, payment card information, or government identification numbers through this website.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries — to reply to messages sent through our contact form, typically within two business days.
• Programme administration — to process bookings and send relevant session information to registered participants.
• Service improvement — to understand how our website is used and identify areas for improvement, using anonymised analytics data.
• Legal compliance — to meet any obligations placed on us by applicable Thai law or regulatory authorities.

We do not use your personal data for automated decision-making or profiling, and we do not sell or rent your data to any third party for marketing purposes.

4. Legal Basis for Processing

We process personal data on the following legal grounds under the PDPA:

• Consent — for optional analytics and marketing cookies, and for sending programme-related updates you have opted into.
• Legitimate interests — to respond to your enquiry and maintain basic website security and functionality.
• Contract — to fulfil a booking or programme registration you have entered into with us.
• Legal obligation — where Thai law requires us to retain or disclose certain records.

5. Data Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected:

• Enquiry records — up to 12 months from the date of last contact, unless you become a participant.
• Participant records — up to 5 years following the date of the programme attended, for administrative and audit purposes.
• Analytics data — aggregated and anonymised; no individual-level data retained beyond 26 months.

6. Data Security

We take reasonable steps to protect personal data from loss, misuse, or unauthorised access. Measures in place include:

• HTTPS encryption for all data transmitted through this website.
• Restricted access to personal data, limited to staff members who require it to respond to your enquiry.
• Secure email and document storage practices for all programme records.

In the event of a data incident that is likely to affect your rights, we will notify you and the relevant Thai supervisory authority in accordance with our obligations under the PDPA.

7. Cookies

Our website uses cookies to support basic functionality and, where you have consented, to understand how the site is used. Essential cookies are always active. Optional analytics, marketing, and preference cookies are only placed with your consent. You can review and update your cookie preferences at any time by visiting our Cookie Policy page.

8. Sharing Your Data

We do not sell, trade, or transfer your personal data to external parties for their own commercial purposes. We may share data only in the following limited circumstances:

• Service providers — trusted third-party tools that assist with website hosting, email delivery, or analytics, operating under contractual data protection obligations.
• Legal requirements — where disclosure is required by Thai law, court order, or a competent regulatory authority.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct any inaccuracies in your data.
• Right to erasure — to request deletion of your data, where no lawful reason requires its retention.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing carried out on the basis of our legitimate interests.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee.

10. Children's Privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us and we will promptly remove it.

11. Third-Party Links

Our website may occasionally include links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal data to them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised date at the top of this page will be updated. We encourage you to check this page periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.