Privacy Policy

1. Introduction

Trustleaf ("we", "us", "our") is committed to handling personal information with care, transparency, and respect. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our estate organisation and legacy education programs. Our operations are based at 119 Mu 1, Bo Phut, Ko Samui, Surat Thani 84320, Thailand.

This policy applies to information collected through our website, during program enquiries, and in the course of delivering our services. If you have questions, please contact us at [email protected].

2. Data We Collect

We collect personal data only when it is necessary to communicate with you or to deliver a program. This may include:

• Name and contact information (email address, phone number)
• General information about your family situation (shared voluntarily during enquiry or sessions)
• Correspondence sent to us via email or our website contact form
• Technical data from website visits (see Cookie section below)

We do not collect financial data, identity documents, or sensitive personal information unless you choose to share such materials during a Records Tidy service session, in which case we handle them under strict confidentiality protocols and do not retain copies after the engagement ends.

3. How We Use Your Data

Your data is used only for the purposes you would reasonably expect:

• Responding to your enquiry and discussing program options
• Scheduling and delivering your chosen program
• Sending follow-up communications related to your session
• Improving our programs based on aggregated, anonymised feedback

We do not use your data for marketing to third parties, we do not sell your data, and we do not share it with organisations outside of those directly supporting program delivery (such as calendar or communication tools we use internally).

Legal basis: Processing is based on your consent at the point of enquiry, and on the performance of the service agreement where you have enrolled in a program.

4. Data Retention

We retain contact information for up to two years following your most recent interaction with us, after which it is deleted. Programme-related notes are held for a maximum of twelve months. You may request earlier deletion at any time.

5. Data Protection Measures

• All digital records are stored on password-protected, encrypted systems
• Access to personal data is restricted to team members who need it to deliver the service
• Physical documents shared during sessions are not retained after the session ends
• We review our data practices annually and update them as needed
• In the event of a data breach affecting your information, we will notify you promptly in line with our obligations under the PDPA

6. Cookies

Our website uses cookies to understand how visitors use our site and to remember your preferences. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies required for the site to function cannot be disabled.

7. Third-Party Services

We use a small number of trusted third-party tools to run our website and communications (such as Google Analytics for anonymised traffic analysis). These services have their own privacy policies. We do not permit them to use your data for purposes beyond what we have described here.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Ask us to correct inaccurate data
• Right to erasure: Request that we delete your data, subject to legal obligations
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to particular types of processing
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our programs are designed for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor's data has been submitted to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after changes are posted constitutes your acknowledgment of those changes.

11. Contact

If you have questions or concerns about how we handle your personal data, please reach out:

• Email: [email protected]
• Address: 119 Mu 1, Bo Phut, Ko Samui, Surat Thani 84320, Thailand
• Phone: +66 77 246 8135