Privacy Policy

1. Introduction

Willspring ("we", "us", "our") is committed to handling any personal information you share with us thoughtfully and securely. This policy explains what data we collect, why we collect it, how long we keep it, and what rights you hold over it.

It applies to information collected through our website at willspringx.info and through any direct contact (email, telephone, in-person sessions) in connection with our services: the First Steps Information Guide, Document Coaching Sessions, and Legacy Story Documentation.

We operate from Bangkok, Thailand, and our data practices are informed by Thailand's Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect in June 2022.

2. Data We Collect

We collect only the information necessary to respond to your enquiries and deliver our services. This may include:

• Your name and email address (required for all enquiries)
• Your telephone number (optional, provided on the contact form)
• The content of messages you send us
• Website usage data collected through cookies (see Section 5)

Legal basis: We process your data on the basis of your consent (when you submit the contact form), on the basis of a contractual relationship (when you purchase a service), or on the basis of legitimate interest (to respond to enquiries and maintain website security).

Data retention: Enquiry data is retained for up to 12 months after our last contact. Service-related records are retained for 3 years following service completion, after which they are securely deleted.

3. How We Use Your Data

• Service delivery — to fulfil the guide, coaching sessions, or legacy documentation you have purchased
• Communication — to respond to your enquiries and keep you informed about your service
• Website improvement — to understand how visitors use our website and identify where improvements may be helpful
• Legal compliance — to meet any obligations imposed under Thai law or applicable regulations

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send unsolicited marketing communications. If you purchase a service and wish to receive updates about related services, you may opt in at the time of purchase and withdraw consent at any time.

4. Data Protection Measures

• Our website uses HTTPS encryption for all data transmission
• Contact form data is transmitted via encrypted channels and stored on servers with access controls
• Internal access to personal data is restricted to staff with a direct need
• In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant authority in line with PDPA requirements
• We conduct periodic reviews of our data handling practices

5. Cookies

Our website uses cookies to function correctly and to understand how it is used. We use essential cookies (required for the site to work) and optional analytics cookies (to understand visitor behaviour). You may manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Thailand's PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data where there is no lawful basis for continued retention
• Portability — receive your data in a machine-readable format where technically feasible
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — withdraw consent at any time where processing is based on it
• Lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may include links to external sites, including official Thai government resources. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external site you visit.

8. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be published on this page with a revised "Last updated" date. Where changes are significant, we will notify active contacts by email where we hold an address.

10. Contact

For any data-related question or request, contact our privacy contact:

[email protected]

Willspring, 60 Phahonyothin Road, Sam Sen Nai, Phaya Thai, Bangkok 10400, Thailand