Privacy Policy | Nestvale

1. Introduction

Nestvale ("we", "us", "our") is an education and organisational services provider based at 41 Na Muang Road, Nai Mueang, Khon Kaen 40000, Thailand. This Privacy Policy describes how we collect, use, and protect personal data you provide when engaging with our services, contacting us through our website, or attending our workshops and programmes.

We take data privacy seriously and handle personal information with care. If you have any questions about this policy, please reach us at [email protected].

2. What Personal Data We Collect

We collect only the data necessary to provide our services and respond to enquiries. This may include:

Name, email address, and phone number (from our contact form or direct communication)
The nature of your enquiry and details of family composition relevant to programme selection
Technical data such as browser type, IP address, and pages visited (collected via cookies and analytics tools)
Payment-related information (name and contact details for invoicing purposes only — no card data is stored by us)

We do not request or store sensitive personal data such as health information, government identification numbers, or financial account details.

3. How We Collect Data

Contact form — when you submit an enquiry on our website
Email or phone — when you contact us directly
Session-related communication — when you register or correspond regarding a workshop or programme
Cookies and analytics — automatically when you browse our website (see section 6)

4. Legal Basis for Processing

We process your personal data on the following grounds under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

Consent — for marketing communications and non-essential cookies (you may withdraw consent at any time)
Contractual necessity — to respond to your enquiries and deliver the services you have requested
Legitimate interests — to improve our offerings and maintain records of service delivery

5. How We Use Your Data

To respond to your enquiry and provide information about our programmes
To schedule, deliver, and follow up on workshops and service engagements
To issue invoices and maintain appropriate financial records
To improve our website and service content based on anonymised usage data
To send occasional updates about Nestvale programmes, only where you have consented

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies and Analytics

Our website uses cookies to support basic site functionality and, where consent is given, to gather anonymised usage analytics. Cookie categories and your options are described in detail in our Cookie Policy.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

Enquiry data: up to 12 months if no service engagement follows
Service-related correspondence: up to 3 years following the completion of a service
Financial records: as required by Thai law (typically 5 years)
Analytics data: anonymised and retained indefinitely; identifiable data deleted after 14 months

8. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:

Encrypted storage for digital records
Restricted access to client data (accessible only to team members who need it)
Secure transmission protocols for our website (HTTPS)
No retention of physical documents belonging to clients after Heritage Records engagements

In the event of a data breach that affects your rights, we will notify you as required under the PDPA.

9. Third-Party Services

We may use the following third-party services, each with their own privacy policies:

Google Analytics — website usage data (anonymised)
Google Maps — embedded map on our website (subject to Google's privacy policy)
Email service provider — for sending responses to enquiries

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

10. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — request deletion of your data (subject to legal obligations)
Right to restrict processing — ask us to limit how we use your data in certain circumstances
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

11. Children's Privacy

Our services are directed at families, and children may participate in our sessions alongside adult family members. We do not knowingly collect personal data directly from individuals under the age of 18. Contact and booking data is collected from adults responsible for the family engagement.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related enquiries or to exercise your data rights:

Email: [email protected]
Address: 41 Na Muang Road, Nai Mueang, Khon Kaen 40000, Thailand
Phone: +66 43 619 8052