Privacy Policy

1. Introduction

Legora ("we", "us", "our") operates from 220 Wireless Road, Lumphini, Bangkok 10330, Thailand. We provide estate organisation, inventory, and family conversation programmes for individuals and families.

This Privacy Policy describes how we collect and handle personal data through our website and services. It is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

By using our website or enquiring about our services, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].

2. Data We Collect

Information you provide directly:

• Name and contact details (email address, phone number) when you submit an enquiry form
• Any additional information you choose to include in a message to us

Information collected automatically:

• Browser type, operating system, and device type
• Pages visited, time spent on pages, and referring URL
• IP address (anonymised where possible)
• Cookie preferences (see Section 5)

Legal basis for processing: We process your data on the basis of (a) your consent where required, (b) our legitimate interest in responding to enquiries and improving our service, and (c) performance of a contract where you have enrolled in a programme.

Retention periods: Enquiry data is retained for up to 24 months from last contact, unless you ask us to remove it sooner. Website analytics data is retained in aggregated form for up to 26 months.

3. How We Use Your Data

We use personal data only for the purposes described below:

• Responding to enquiries — to reply to questions you send via our contact form or email
• Programme delivery — to coordinate sessions and send relevant programme materials
• Service improvement — to understand how our website is used and improve its content
• Legal compliance — to meet any obligations under Thai law

We do not sell personal data to third parties. We do not use personal data for automated decision-making. We will only send you marketing communications if you have explicitly consented, and you may withdraw consent at any time.

Third-party processors: We may share data with trusted service providers (such as email hosting or website analytics providers) who process data on our behalf under strict confidentiality agreements. These providers are not permitted to use your data for their own purposes.

4. Data Protection Measures

We take reasonable and appropriate steps to protect personal data from loss, misuse, and unauthorised access. These include:

• Encrypted data transmission (HTTPS/TLS) on all website pages
• Access controls limiting who within our team can view personal data
• Regular review of data storage and access practices
• Prompt notification to affected individuals in the event of a personal data breach, as required by the PDPA

While we apply these measures diligently, no method of transmission over the internet is entirely without risk. We encourage you to contact us if you have concerns about the security of information you have shared with us.

5. Cookies

Our website uses cookies to support basic functionality and understand how visitors use the site. Cookies are small text files stored in your browser.

We use the following categories of cookies:

• Essential cookies — required for the site to work correctly; these cannot be disabled
• Analytics cookies — help us understand page usage in aggregate; these are optional
• Preference cookies — remember settings such as your cookie choices; these are optional

You can manage your cookie choices at any time via our Cookie Policy page, which includes interactive controls.

6. Your Rights

Under the PDPA and applicable data protection principles, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data where there is no longer a lawful reason to retain it
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint — to raise a complaint with the Office of the Personal Data Protection Committee (PDPC), the supervisory authority in Thailand

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites for reference purposes. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing any personal information with them.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will remove it promptly.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes take effect constitutes acceptance of the revised policy.

For significant changes, we may notify you directly by email if we hold your contact details.

10. Contact

Data Controller: Legora
220 Wireless Road, Lumphini, Bangkok 10330, Thailand

Privacy enquiries: [email protected]

General contact: [email protected]  ·  +66 82 593 6147

Legora is an education and organisation service. It does not provide legal, financial, or professional advice.