Privacy Policy

1. Introduction

Havenly ("we", "our", "us") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect from people who enquire about or attend our family communication and education programmes in Nonthaburi, Thailand, how we use it, and the rights available to you under Thai law.

This policy applies to data collected through our website at havenly.pro, through our contact form, and in connection with programme enrolment and attendance.

Questions about this policy can be directed to: [email protected]

2. Data We Collect

We collect only the information needed to communicate with enquirers and to organise programme sessions:

• Contact details: name, email address, and phone number (where provided through our enquiry form).
• Programme participation: which session or programme a person attended and the date.
• Website usage data: pages visited, approximate location (country/region), browser type, and time of visit — collected through analytics cookies where consent has been given.
• Communication records: emails or messages sent to us, and our responses.

We do not collect sensitive personal information about family circumstances, financial situations, or matters discussed in sessions.

3. Legal Basis for Processing

We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). The legal bases we rely on are:

• Consent: for cookies, marketing communications, and any processing beyond what is strictly necessary.
• Legitimate interest: for responding to enquiries and managing programme administration.
• Contract performance: for processing data necessary to deliver a booked programme or session.

4. How We Use Your Data

• Responding to enquiries about our programmes.
• Confirming session bookings and sending practical information about attendance.
• Administering and improving our programmes based on anonymous, aggregate feedback.
• Meeting any legal obligations applicable to us as an education provider in Thailand.

We do not use personal data for profiling, automated decision-making, or targeted advertising.

5. Data Sharing

We do not sell or share personal data with third parties for marketing purposes. Data may be shared only in the following limited circumstances:

• With service providers who support our website or email operations (e.g. hosting providers), under data processing agreements.
• With analytics providers where consent has been given for analytics cookies.
• Where required by Thai law or a lawful order from a competent authority.

6. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

• Enquiry data: retained for 12 months from the date of enquiry if no booking results.
• Programme participant records: retained for 3 years to manage any follow-up administrative needs.
• Analytics data: retained for up to 14 months by our analytics provider.

7. Cookies

Our website uses cookies to support functionality and, where consent is given, to analyse how the site is used. Details of the cookie types we use and how to manage your preferences are set out in our Cookie Policy.

8. Data Security

We take reasonable technical and organisational steps to protect personal data against unauthorised access, alteration, disclosure, or loss. These include:

• HTTPS encryption on our website.
• Limited internal access to personal data on a need-to-know basis.
• Regular review of our data storage and handling practices.

No transmission of data over the internet can be considered fully secure. Where a data breach occurs that is likely to affect individuals, we will notify those affected and the relevant Thai authority in accordance with the PDPA.

9. Your Rights Under Thai PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate data.
• Right to erasure: to request deletion of your data where we no longer have a lawful basis to hold it.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to withdraw consent: to withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal data.

11. Children's Privacy

Our website and programmes are directed at adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be noted on this page with an updated effective date. Continued use of our website after a change constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or to exercise your rights: