Privacy Policy

Our Commitment to Privacy

Legacara ("we", "us", "our") is a personal record organisation service based in Nonthaburi, Thailand. This Privacy Policy explains how we collect, use and protect personal data submitted through our website at legacarax.blog and through our contact channels.

We take privacy seriously. A significant part of what Legacara offers is tools for keeping personal information private — so we apply the same principle to how we handle the data of those who contact us.

For questions about this policy, contact us at [email protected].

What Information We Receive

We collect the following categories of personal data:

• Contact information: Name, email address and phone number submitted via the contact form or provided when placing an enquiry.
• Message content: The text of enquiries, questions or requests you send us.
• Usage data: Standard website analytics such as pages viewed, approximate location (country level), browser type and referral source. This data is collected in aggregated, non-identifiable form where possible.
• Cookie preferences: Your cookie consent choices, stored locally in your browser.

We do not collect the personal records, inventory data or catalogue content you complete using our template materials. Those materials are for your personal use and remain entirely in your custody.

Legal Basis for Processing

Processing is conducted on the basis of your consent (where given), legitimate interest in responding to enquiries and fulfilling service requests, and compliance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

Retention Periods

Enquiry data is retained for up to 24 months from the date of last contact. Analytics data is retained in aggregated form only. Cookie consent records are stored in your local browser and are not transmitted to us.

Data Usage

Personal data is used for the following purposes:

• Responding to enquiries and delivering requested materials
• Processing payments and confirming orders
• Providing support in relation to toolkit use
• Improving the website and materials based on aggregate usage patterns
• Complying with legal obligations under Thai law

We do not sell personal data. We do not share personal data with third parties for marketing purposes. Data may be shared with service providers (such as email delivery services) strictly for the purpose of fulfilling your request, under contractual confidentiality obligations.

Security Measures

• Website transmitted via HTTPS (TLS encryption)
• Email systems using standard encryption in transit
• Access to contact data restricted to authorised staff
• Regular review of data handling practices

In the event of a data breach that may affect your rights, we will notify affected individuals and the relevant authority in accordance with Thai PDPA requirements, within the timeframes prescribed by law.

Cookie Use

Our website uses cookies for essential functionality and optional analytics purposes. Your preferences are stored locally in your browser via localStorage and are not transmitted to our servers.

For full details of which cookies are used and how to manage them, please see our Cookie Policy.

Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights regarding personal data we hold about you:

• Right of access: Request a copy of personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of personal data, subject to legal retention requirements.
• Right to portability: Request your data in a commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have not been respected.

External Links

Our website may contain links to external sites. Legacara is not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to review the privacy policy of any external site you visit.

Age Requirement

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our site, please contact us at [email protected] and we will remove it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website after a change constitutes acceptance of the updated policy. Where changes are significant, we will take reasonable steps to notify registered contacts.

Data-Related Enquiries

Data Controller: Legacara

240 Chaeng Watthana Road, Pak Kret, Nonthaburi 11120, Thailand

Email: [email protected]

Phone: +66 55 360 9182