Legal

Privacy Policy

This policy explains how Legacurio collects, uses and looks after the personal information you share with us. We handle your details with the same care and discretion we bring to all our work.

Last updated: 1 May 2025

1. Who We Are

Legacurio is an estate records organisation and family archive service based in Bangkok, Thailand. We provide document sorting, heirloom cataloguing and educational legacy planning workshops to individuals and families.

Our registered address is 156 Sukhumvit Soi 24, Khlong Tan, Bangkok 10110, Thailand. You can reach us by telephone at +66 43 318 7029 or by email at [email protected].

Legacurio acts as the data controller in respect of the personal information described in this policy. We are committed to handling your personal details responsibly and in accordance with applicable Thai data protection legislation, including the Personal Data Protection Act B.E. 2562 (PDPA).

2. Information We Collect

We collect only the personal information necessary to provide our services and respond to your enquiries. This may include the following:

Contact & Identification Details

Your name, telephone number, email address and postal address, which you provide when making an enquiry, booking a service or completing our contact form.

Service-Related Information

Details about the documents, photographs, heirlooms or personal records you ask us to help organise or catalogue, shared at your own discretion and handled with the greatest care.

Communications

The content of messages and emails you send us, including any attachments, so that we can respond helpfully and keep a record of our correspondence.

Website Usage Data

Basic technical information about your visit to our website, such as your browser type, the pages you view and the time of your visit. This is collected through cookies and similar technologies where you have given your consent.

We do not collect sensitive personal data (such as financial account details, health information or identification documents) unless this is strictly necessary and you have explicitly provided it as part of our archiving service.

3. How We Use Your Information

We use your personal information for the following purposes:

  • To respond to your enquiries and provide the services you have requested from us.
  • To schedule and manage appointments, workshops and service visits.
  • To send you confirmation, follow-up or service-related communications.
  • To improve our website and understand how visitors use it, so we can make it more helpful.
  • To meet any legal or administrative obligations that apply to our business.

We will not use your information for any other purpose without seeking your consent first.

4. Lawful Basis for Processing

Under Thailand's Personal Data Protection Act, we rely on the following lawful bases to process your personal information:

CONTRACT

Where processing is necessary to provide the services you have asked for or to take steps before entering into a service agreement with you.

CONSENT

Where you have given us clear consent to process your information for a specific purpose, such as the use of non-essential cookies on our website.

LEGAL OBLIGATION

Where we are required to retain or disclose information in order to meet a statutory obligation.

LEGITIMATE INTERESTS

Where processing is in our legitimate interests and is proportionate — for example, improving our services and keeping business records — and those interests are not overridden by your own rights.

5. Sharing Your Information

We treat your personal information with discretion and do not sell it or share it with third parties for their own marketing purposes. We may share it only in the following limited circumstances:

  • Service providers — trusted third parties who help us deliver our services, such as secure cloud storage providers. They are only permitted to process your data on our instructions.
  • Legal requirements — if we are required by law or a regulatory authority to disclose your information, we will do so while informing you where it is lawful and practicable to do so.
  • Business transfers — if Legacurio is ever involved in a merger, acquisition or similar transaction, your information may be transferred as part of that process, subject to equivalent privacy protections.

6. How Long We Keep Your Information

We keep your personal information only for as long as is necessary for the purposes it was collected or to meet our legal obligations.

Enquiry and contact records are typically held for up to 24 months. Records relating to completed service engagements are held for up to five years for administrative and correspondence purposes. Website usage data collected through cookies is held for periods set out in our Cookie Policy.

When your information is no longer needed, we delete or securely destroy it in a way that protects your privacy.

7. Your Rights

Under the PDPA and applicable data protection principles, you have the following rights in relation to your personal information:

Right to Access

You may ask us to confirm whether we hold your personal information and to provide you with a copy of it.

Right to Rectification

You may ask us to correct any inaccurate or incomplete information we hold about you.

Right to Erasure

You may ask us to delete your personal information where there is no compelling reason for us to continue holding it.

Right to Restrict Processing

You may ask us to pause the use of your information in certain circumstances, such as while we address a query about accuracy.

Right to Data Portability

Where processing is based on consent or contract, you may ask for your information in a structured, commonly used format.

Right to Withdraw Consent

Where processing relies on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected] or write to us at our address below. We will respond within a reasonable time and always within the period required by law.

8. Cookies

Our website uses cookies — small text files placed on your device — to help it function properly and, where you have consented, to understand how it is used. You can manage your preferences at any time using the cookie settings banner on our homepage.

For full details of the cookies we use and how to control them, please see our Cookie Policy.

9. Security

We take the security of your personal information seriously. We use appropriate technical and organisational measures to protect it from loss, misuse, unauthorised access or disclosure. These include secure server storage, restricted access for our staff and regular review of our data handling practices.

No method of electronic transmission or storage is entirely free from risk. If you have any concern about how your information is being held, please contact us and we will do our best to help.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically so you are always aware of how we look after your information.

If we make any significant changes that affect your rights, we will let you know by a clear notice on our website or by direct communication where appropriate.

11. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal information, please do not hesitate to get in touch. We welcome the opportunity to address any query and will do so with care and promptness.

Legacurio