Privacy Policy

1. Introduction

Estrava ("we", "us", "our") is committed to handling your personal information with care. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our estate organisation and legacy documentation services, and with use of our website at estrava.pro.

This policy applies to all individuals who contact us, use our website, or engage our services in Chiang Mai, Thailand. We encourage you to read it carefully. If you have questions, you can contact us at [email protected].

Estrava operates under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect on 1 June 2022.

2. Data We Collect

We collect only the personal information that is reasonably necessary for the services we provide or for communicating with you.

Information you give us directly:

• Name and contact details (email address, phone number)
• Your message or enquiry through the contact form
• Information shared during in-home sessions relevant to the service you have engaged (e.g., details of belongings, accounts, or personal stories)

Information collected automatically:

• Cookie preferences stored in your browser (see Section 5)
• Basic analytics data if you have consented to analytics cookies (pages visited, session duration, browser type)

Information we do not collect:

We do not collect financial account numbers, passwords, or any sensitive personal data beyond what is shared voluntarily during a session. We do not retain copies of documents viewed during in-home sessions unless explicitly agreed with you.

3. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data on the following legal bases:

• Consent — for marketing communications and analytics cookies
• Contractual necessity — to deliver the service you have engaged us for
• Legitimate interests — for basic enquiry management and improving our services, where these interests are not overridden by your rights

4. How We Use Your Data

• To respond to your enquiries and arrange sessions
• To carry out the documentation or organisation service you have requested
• To send service-related follow-up communications (e.g., session confirmations)
• To improve our website and communications, if you have consented to analytics
• To comply with our legal obligations under Thai law

We do not sell your personal data. We do not share it with third parties for marketing purposes. We may share limited contact information with a sub-contractor (e.g., a transcription service for Legacy Storytelling sessions) only with your prior knowledge and agreement.

5. Cookies

Our website uses a small number of cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, preferences) are used only with your consent. You can manage your cookie preferences at any time on our Cookie Policy page.

6. Data Retention

We retain contact form submissions and enquiry data for up to 12 months from the date of last contact. Session-related notes and documents are provided to you at completion and are not retained by us beyond 30 days after the final session, unless you have separately agreed otherwise.

7. Data Protection Measures

• Website data is transmitted over HTTPS (TLS encryption)
• Internal records are stored on password-protected devices with access limited to the team member handling your engagement
• We do not use public cloud services for storing client session materials
• If we become aware of a data breach affecting your personal information, we will notify you within 72 hours where reasonably practicable

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your personal data, subject to legal obligations
• Right to data portability — to receive your data in a structured, readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw any consent you have given at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC), Thailand's supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites (for example, Google Maps). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before sharing personal information with them.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The date at the top of this page will indicate when it was last updated. We will notify active clients of significant changes by email where we hold contact details.

12. Contact

For privacy-related enquiries or to exercise your data rights, contact Estrava at:

• Email: [email protected]
• Address: 78 Thanon Bamrungrat, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand