Legal

Privacy Policy

Last Updated: 10 June 2026

Legacywright ("we", "us", "our") is committed to handling the personal information of our clients, website visitors, and enquirers with care and transparency. This Privacy Policy explains what data we collect, how it is used, and the rights you have over your information.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have any questions about this policy, please contact us at [email protected].

1. Who We Are

The data controller for personal data processed through this website and our services is:

Legacywright
70 Sathorn Road, Sathon, Bangkok 10120, Thailand
Email: [email protected]
Phone: +66 2 286 5471

2. What Data We Collect

Information You Provide

Full name and contact details (email address, telephone number) submitted via our enquiry form
Content of messages sent to us through the website contact form
Billing information where a session is booked (processed via secure payment channels; we do not store card details)

Information Collected Automatically

Browser type, device type, and approximate location (country/city level) via analytics cookies
Pages visited, time spent on pages, and referral source
IP address (anonymised where technically possible)

Legal Basis for Processing

Consent — where you have expressly agreed (e.g., accepting cookies, submitting the contact form)
Legitimate interest — for website analytics used solely to improve our site
Contract performance — where data is necessary to deliver a booked session

Retention Periods

Enquiry data: 24 months from last contact. Session booking records: 5 years for accounting purposes. Analytics data: 26 months (standard analytics retention). You may request deletion at any time; see Section 6.

3. How We Use Your Data

To respond to enquiries about our sessions and programmes
To confirm and administer session bookings
To send service-related updates (e.g., scheduling changes) — not marketing
To analyse how visitors use our website and improve content accordingly
To comply with applicable legal and tax obligations

We do not send unsolicited marketing emails. If we ever offer an opt-in newsletter, subscription will be strictly voluntary and easy to cancel.

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Service providers: Hosting and IT support providers under strict data processing agreements
Analytics: Anonymised, aggregated data may be processed by analytics tools (e.g., Google Analytics, with IP anonymisation enabled)
Legal obligation: Where disclosure is required by Thai law or a lawful authority

If data is transferred outside Thailand, we ensure appropriate safeguards are in place as required by the PDPA.

5. How We Protect Your Data

Website connections secured via TLS (HTTPS) encryption
Access to personal data within our team is limited to those who need it to deliver services
Internal data stored on password-protected, encrypted systems
Regular review of access controls and data handling practices
In the event of a data breach, we will notify affected individuals and the relevant authority within the timeframes required by Thai PDPA obligations

6. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — request deletion of your data, subject to legal retention requirements
Right to data portability — receive your data in a structured, commonly used format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — withdraw any consent given at any time
Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been infringed

To exercise any right, contact us at [email protected]. We will respond within 30 days.

7. Cookies

Our website uses cookies to improve your experience. We use essential cookies (required for the site to function), analytics cookies (to understand site usage, optional), and preference cookies (to remember your settings, optional). For full details and to manage your cookie preferences, see our Cookie Policy.

8. Third-Party Links

Our website may contain links to external sites (e.g., Google Maps). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.

9. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be notified prominently on our website. Continued use of the site after a change constitutes acceptance of the updated policy.

11. Contact for Privacy Enquiries

For any questions, requests, or concerns related to your personal data:

Legacywright — Privacy
70 Sathorn Road, Sathon, Bangkok 10120, Thailand
Email: [email protected]
Phone: +66 2 286 5471