Privacy Policy | Estora — Estate Records & Legacy Organisation

1. Introduction

Estora ("we", "us", "our") is committed to protecting the personal information of every person who contacts us or engages our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to personal information collected through our website at estorai.pro, through our enquiry form, and through direct correspondence with our team. It governs data collected in connection with our estate records organisation services provided from our office at 96 Phaya Thai Road, Ratchathewi, Bangkok 10400, Thailand.

For questions about this policy, please contact us at [email protected].

2. Data We Collect

Information You Provide Directly

Full name
Email address
Telephone number (if provided)
Message content submitted through our contact form
Any information you share during sessions or correspondence

Information Collected Automatically

IP address and browser type (via analytics cookies, if consented)
Pages visited and time spent on site
Referral source (how you arrived at the website)

Legal Basis for Processing

We process your personal data on the following bases under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand:

Consent — for analytics cookies and marketing communications
Legitimate interest — for responding to enquiries and managing our client relationships
Performance of a contract — for delivering services to clients who have engaged us

3. How We Use Your Data

To respond to enquiries submitted through our contact form
To schedule and manage session appointments
To send session confirmation, summary, and follow-up communications
To improve our website and understand how visitors use it (analytics, only with consent)
To comply with applicable legal obligations in Thailand

We do not use your personal data for unsolicited marketing without your explicit consent. You may withdraw consent at any time by contacting us at [email protected].

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

Service providers — IT and hosting providers who operate under confidentiality obligations
Analytics services — aggregated, anonymised data where analytics cookies have been accepted
Legal requirements — where disclosure is required by Thai law or a competent authority

All third parties with whom we share data are required to handle it in a manner consistent with this policy.

5. Data Retention

Enquiry and contact form data: retained for 24 months from last contact, then deleted
Session-related records: retained for the duration of the client relationship and three years thereafter
Analytics data: retained in aggregated form only; raw data deleted after 14 months

6. Data Protection Measures

We take reasonable and appropriate measures to protect your personal data against unauthorised access, alteration, or disclosure. These measures include:

Encrypted transmission of data via HTTPS
Access controls limiting who within Estora can view client information
Regular review of data handling practices
Confidentiality agreements with all staff and contractors

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with the PDPA.

7. Cookies

Our website uses cookies to function correctly and, with your consent, to analyse how visitors use the site. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand), you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data (subject to legal retention requirements)
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interest
Right to withdraw consent — to withdraw consent for processing at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee of Thailand (PDPC).

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their individual policies before providing any personal information.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, the "Last Updated" date at the top of this page will be revised. We encourage you to review this policy periodically.

12. Contact

For any queries relating to this Privacy Policy or your personal data:

Email: [email protected]
Address: 96 Phaya Thai Road, Ratchathewi, Bangkok 10400, Thailand
Phone: +66 2 246 7039