Privacy Policy

1. Introduction

Vesterly ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have regarding that data. It applies to all services offered by Vesterly and to our website at vesterly.sbs.

If you have questions about this policy, please contact us at [email protected].

2. Data Controller

The data controller responsible for personal data collected through this website and our services is:

• Vesterly
• 22 Montri Road, Talat Yai, Phuket 83000, Thailand
• Email: [email protected]
• Phone: +66 76 491 2806

3. What Data We Collect

We collect the following types of personal data:

• Contact information: Name, email address, and telephone number when you submit a contact form or enquiry.
• Communication data: The content of emails or messages you send us.
• Usage data: Technical information such as browser type, IP address, and pages visited, collected via cookies and analytics tools (with your consent).
• Service data: Information you share during a Records Tidy-Up session or Community Programme attendance, limited to what is necessary to deliver the service.

We do not collect sensitive personal data such as health information, financial account details, or government identification numbers.

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide the services you have requested
• To send service-related communications such as booking confirmations
• To improve our website and services using aggregated, anonymised analytics data
• To comply with legal obligations where applicable

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent — for cookies and marketing communications (where applicable)
• Contract performance — to deliver the service you have requested
• Legitimate interests — to respond to enquiries and improve our services, where these interests are not overridden by your rights
• Legal obligation — where required by Thai law or other applicable regulations

6. Data Retention

We retain your contact data for as long as necessary to respond to your enquiry or deliver the requested service, and for a period of up to two years thereafter in case follow-up questions arise. Analytics data is retained in anonymised form. You may request deletion of your data at any time by contacting us at [email protected].

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. Data may be shared with:

• Website hosting and technology providers, strictly for operational purposes
• Analytics service providers (with anonymised data only, and subject to your cookie preferences)
• Law enforcement or regulatory bodies if required by applicable law

8. Cookies

Our website uses cookies to support basic functionality and, with your consent, to collect analytics data. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Data Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. This includes access controls on systems that hold personal data, and limiting access to staff who require it to perform their role. In the event of a data breach that is likely to result in risk to your rights, we will notify you as required by applicable law.

10. Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restriction — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact [email protected]. We will respond within 30 days.

11. International Data Transfers

Data may be processed by service providers outside Thailand. Where this occurs, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection law.

12. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

13. Links to Third-Party Sites

Our website may include links to external websites, including official government or information sources. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We will notify users of material changes via the website or by email where appropriate.

15. Contact for Privacy Matters

For any questions, requests, or concerns relating to how we handle your personal data:

• Email: [email protected]
• Post: Vesterly, 22 Montri Road, Talat Yai, Phuket 83000, Thailand