Legal & Data
Privacy Policy
Hearthwise collects a small amount of personal information to operate our reading guides, household workshops, and reading series mailings. This page explains what we collect, how we use it, and the choices available to you.
Last Updated: 5 May 2025
1. Introduction
Hearthwise ("we", "our", "us") operates at 64 Sukhumvit Soi 49, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. This Privacy Policy describes how we handle personal information submitted through our website at https://hearthwise.pro and through our service fulfilment processes.
We hold personal data only as needed to fulfil the purpose for which it was shared and to keep you informed about orders, workshops, and mailings you have requested. We do not sell, rent, or trade personal information to any third party for commercial purposes.
2. Data We Collect
We may collect the following categories of personal information:
- Contact information — full name, email address, and telephone number when submitted via our contact form.
- Postal address — for households ordering printed guides or joining the reading series mailing programme.
- Workshop attendance records — name and contact details for participants registered in the Document Organisation Workshop.
- Website usage data — pages visited, session duration, and browser type, collected anonymously through analytics cookies when consent is given.
- Communication records — correspondence sent to or from our team by email or telephone.
We collect this information either directly from you (via forms or email) or automatically through cookies and similar technologies after you have given consent.
3. Legal Basis and Purposes of Processing
| Purpose | Legal Basis | Retention |
|---|---|---|
| Responding to enquiries and providing requested materials | Contract / Pre-contractual steps | 3 years from last interaction |
| Processing workshop registrations | Contract | 5 years from workshop date |
| Fulfilling printed guide and reading series orders | Contract | 5 years from order date |
| Website analytics and improvement | Consent | 26 months (Google Analytics default) |
| Legal compliance and record-keeping | Legal obligation | As required by Thai law |
4. Data Sharing
We share personal data only in the following circumstances:
- Postal fulfilment partners — name and delivery address are shared with Thai postal or courier services to dispatch printed materials.
- Analytics providers — anonymised usage data may be processed by Google Analytics under data processing terms with Google LLC.
- Advertising platforms — if consent is given, aggregated engagement signals may be shared with Google Ads, Meta (Facebook), or Microsoft Advertising for campaign measurement only. No individual profiles are built without consent.
- Legal requirements — we may disclose information where required by Thai law or a lawful government authority request.
5. Data Protection Measures
We maintain reasonable technical and organisational safeguards, including:
- TLS encryption for all data transmitted through our website.
- Access controls limiting personal data to staff who need it to deliver the service.
- Regular review of third-party processors to ensure appropriate data handling standards.
- Physical records (e.g., workshop sign-in sheets) stored securely and destroyed after their retention period.
In the event of a personal data incident that could affect your rights, we will notify affected individuals within a reasonable period in accordance with applicable requirements.
6. Cookies
Our website uses cookies for essential functionality and, with your consent, for analytics purposes. Essential cookies keep your session active and remember your cookie preference. Analytics cookies are only set after you accept via the banner on our homepage.
For full details and to manage your cookie choices, please visit our Cookie Policy.
7. Your Rights
Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:
- Right to access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may ask us to correct inaccurate or incomplete data.
- Right to erasure — you may ask us to delete your data where there is no compelling reason for us to continue holding it.
- Right to portability — you may request your data in a structured, machine-readable format.
- Right to object — you may object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
- Right to lodge a complaint — you may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Third-Party Links
Our website may contain links to external sites, including postal services or partner organisations. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy notices independently.
9. Children's Privacy
Our services and website are directed at adults (18 years and older). We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will promptly remove it.
10. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised date. We encourage periodic review. Continued use of our services after a change is posted constitutes acceptance of the revised policy.
11. Contact
Data Controller: Hearthwise
Address: 64 Sukhumvit Soi 49, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Privacy enquiries: [email protected]
General contact: [email protected] | +66 92 384 6517