Privacy Policy | Vaultline

1. Introduction

Vaultline ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what information we collect, why we collect it, how it is used, and what rights you have in relation to your personal data. It applies to all individuals who interact with our website, enquire about our programs, or attend our sessions.

This policy is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). If you have questions about how we handle your personal data, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide Directly

Your name and contact details (email address, telephone number) when you submit an enquiry form or contact us directly
Any message content you include when writing to us
Correspondence and communication records if we exchange emails or calls

2.2 Information Collected Automatically

Basic website analytics data (pages visited, time on site, general geographic region) through analytics cookies, if you consent to these
Technical data including browser type and device type, used to maintain site functionality

2.3 What We Do Not Collect

Vaultline does not collect, store, or retain any personal document content, family histories, or session-specific information shared during programs. All session outputs belong to the participating family. We hold no records of what families discuss or document during sessions.

3. Legal Basis for Processing

Consent: Where you have given explicit consent, for example by accepting optional cookies or opting into communications
Legitimate interest: Where we have a genuine business reason to process data, such as responding to an enquiry you have initiated
Contract performance: Where data processing is necessary to fulfil a booking or service arrangement you have entered into with us

4. How We Use Your Information

To respond to your enquiry and explain our programs
To arrange and confirm session bookings
To send relevant information about our programs where you have requested this
To improve our website and services through anonymised analytics data
To comply with legal obligations applicable to us in Thailand

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties. We do not share personal data with marketing partners.

5. Data Retention

Enquiry and booking contact records are retained for up to 24 months from the date of last contact, after which they are securely deleted. Analytics data is retained in aggregated, anonymised form and not linked to individuals. If you request deletion of your records before the standard retention period, we will honour this request promptly.

6. Data Protection Measures

Personal data submitted through our contact form is transmitted using standard HTTPS encryption
Access to stored contact information is restricted to Vaultline staff who require it to respond to enquiries or manage bookings
In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant Thai supervisory authority within a reasonable timeframe as required by the PDPA

7. Cookies

Our website uses cookies to maintain basic functionality and, with your consent, to collect anonymised analytics information. You can manage cookie preferences at any time through the controls on our Cookie Policy page or by adjusting your browser settings. Refusing optional cookies does not affect your ability to use the site or enquire about our programs.

8. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

Right to access: Request a copy of personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data, subject to any legal obligations we may have to retain it
Right to portability: Receive your personal data in a structured, commonly used format where technically feasible
Right to object: Object to processing based on legitimate interest
Right to withdraw consent: Withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal
Right to lodge a complaint: Submit a complaint to Thailand's Personal Data Protection Committee if you believe your rights have been infringed

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal data to them.

10. Children's Privacy

Our programs and website are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be noted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

12. Contact

If you have questions about this policy or wish to exercise your rights:

Email: [email protected]
Post: Vaultline, 88 Yaowarat Road, Samphanthawong, Bangkok 10100, Thailand
Phone: +66 2 224 5817