Privacy Policy | Legacia

Legacia ("we", "us", "our") is committed to protecting the personal information of everyone who contacts us, visits our website, or engages our services. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable privacy frameworks.

1. Who We Are

Data controller: Legacia, 288 Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand. Email: [email protected]. Phone: +66 2 293 7864.

2. What Personal Data We Collect

We collect only what is necessary to provide our services and communicate with you:

Contact information: name, email address, phone number
Correspondence: messages you send us via our contact form or email
Scheduling information: dates, times, location preferences for sessions
Session notes: written summaries produced during or after sessions (these belong to you and are sent to you — we do not retain copies after delivery unless you explicitly ask us to)
Website usage data: IP address, browser type, pages visited (via cookies — see Section 7)

We do not retain copies of client documents. Any records you bring to or share during a session remain yours and are not stored by Legacia.

3. Legal Basis for Processing

We process personal data on the following legal grounds:

Performance of a contract — to deliver the services you engage us for
Consent — where you have given explicit consent (e.g. for marketing communications)
Legitimate interests — to respond to enquiries, maintain business records, and improve our services
Legal obligation — where required by Thai law or regulatory requirements

4. How We Use Your Information

To respond to enquiries and schedule sessions
To deliver session summaries and other agreed outputs
To maintain records of our business activities
To improve our website and services
To send service-related communications (e.g. appointment confirmations)
With your consent, to send occasional updates about Legacia's services

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

Service providers who support our operations (e.g. email hosting, scheduling tools) — these providers are contractually bound to handle data securely
Regulatory authorities or law enforcement, where required by Thai law

We do not share client session content with any third party, including family members not present at the session, without explicit written consent.

6. Data Retention

Contact enquiries: retained for 2 years from last contact
Client records and session notes: retained for 3 years from the date of service, then securely deleted
Financial records: retained for 7 years in line with Thai accounting requirements
Website analytics data: retained for up to 26 months

7. Cookies

Our website uses cookies to understand how visitors use the site and to remember your preferences. Please see our Cookie Policy for full details. You may adjust your cookie preferences at any time using the settings on that page.

8. Data Security

We apply appropriate technical and organisational measures to protect personal data, including:

HTTPS encryption for all data transmitted via our website
Access controls restricting data to team members who need it
Secure deletion of session records after the retention period
No cloud storage of client document content

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant Thai supervisory authority within the timeframes required by law.

9. Your Rights

Under the PDPA and applicable privacy law, you have the right to:

Access personal data we hold about you
Correct inaccurate or incomplete data
Request erasure of your data (subject to legal retention requirements)
Restrict or object to certain processing activities
Withdraw consent at any time (where consent is the legal basis)
Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected] or by phone at +66 2 293 7864. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.

11. Children

Our services are intended for adults (18 and over). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy. For significant changes, we will notify active clients by email.

13. Contact

For any privacy-related questions or to exercise your rights:

Email: [email protected]
Phone: +66 2 293 7864
Post: Legacia, 288 Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand