Privacy Policy

1. Introduction

Ancestree ("we", "our" or "us"), located at 35 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand, is committed to handling your personal information with care and respect. This Privacy Policy explains what data we collect when you interact with our website or contact us about our document organising, family history workshop or heritage archiving services, how we use it and the choices you have.

By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have any questions at any time, please write to us at [email protected].

2. Personal Data We Collect

We collect only the information necessary to respond to your enquiry and deliver our services. This may include:

• Your name, so we may address you personally
• Your email address, so we may reply to your enquiry
• Your phone number, if you choose to provide it
• The content of any message you send through our contact form
• Technical data collected automatically: IP address, browser type, pages visited and time of visit, gathered via cookies and analytics tools

Legal basis for processing: Your personal data is processed on the basis of your consent (when you submit our form), our legitimate interest in responding to enquiries and improving our website, and, where applicable, the performance of a service agreement.

Retention: Enquiry records are kept for up to 24 months. Website analytics data is retained for up to 14 months before being automatically aggregated or deleted.

3. How We Use Your Information

The personal data you share with us is used only for the purposes described at the time of collection:

• To respond to your enquiry and discuss our services with you
• To arrange and deliver the document organising, workshop or archiving service you have requested
• To send service-related follow-up messages, with your consent
• To analyse how visitors use our website, so we may improve it over time
• To comply with applicable Thai laws and regulations

We do not sell, rent or trade your personal data to any third party for marketing purposes.

4. Sharing Your Data

Your information may be shared with a limited number of trusted service providers who assist us in operating our website and delivering our services:

• Google Analytics — for website usage analysis. Data is pseudonymised and processed under Google's data processing terms.
• Email and hosting providers — to receive and store contact form submissions securely.

All third-party processors are required to handle your data in accordance with applicable data protection requirements and may not use it for any other purpose.

5. How We Protect Your Data

We take reasonable and practical steps to keep your personal information safe:

• Our website is served over HTTPS, encrypting data in transit
• Access to stored enquiry data is restricted to authorised team members only
• We review our data-handling practices regularly
• In the unlikely event of a data breach that may affect your rights, we will notify you without undue delay

6. Cookies

Our website uses cookies to support basic site functionality, remember your preferences and understand how visitors use our pages. We place a brief cookie notice when you first visit and store your choice using your browser's local storage.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards, you have the following rights regarding your personal data:

• Right of access — you may ask us to confirm whether we hold data about you and receive a copy
• Right to rectification — you may ask us to correct inaccurate or incomplete data
• Right to erasure — you may request that we delete your personal data where there is no compelling reason for us to continue holding it
• Right to data portability — you may request a structured, machine-readable copy of data you have provided to us
• Right to object — you may object to processing carried out on the basis of our legitimate interests
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may include links to external sites for your reference. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before sharing personal information with them.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will take steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.