Privacy Policy

Last Updated: 10 June 2025

Stillhaven ("we", "our", "us") is committed to handling your personal information with care and in accordance with applicable laws. This policy explains what data we collect, how we use it, and what choices you have. If you have questions at any point, you are welcome to contact us at [email protected].

This policy applies to data collected through our website at https://stillhaven.world, our contact forms, and through direct engagement with our services. Our business is registered and operated in Phuket, Thailand, and we process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. What Personal Data We Collect

We collect only the information necessary to respond to enquiries and deliver our services. This may include:

Contact information: name, email address, and phone number (when provided via our contact form)
Enquiry content: the message you send us
Service-related information: details you share when discussing or booking a service appointment
Website usage data: pages visited, browser type, referring URL, collected via analytics cookies only with your consent

We do not collect payment card details directly. Payments, if processed, are handled by a third-party payment provider.

Retention period: Contact enquiry data is held for 24 months from last contact. Analytics data is retained for 14 months.

Legal basis: Processing is based on your consent (for analytics cookies), on the need to respond to your enquiry (legitimate interest), or on the performance of a service contract when you engage us.

2. How We Use Your Data

Responding to your enquiries and questions
Scheduling and delivering our services
Sending a confirmation or follow-up communication after a service engagement
Improving our website based on aggregate usage patterns (analytics only, with consent)
Complying with legal obligations under Thai law

We do not send marketing communications. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We may share data with service providers who assist us in operating the website (e.g. hosting provider, analytics provider), under contractual obligations to handle data securely and only for the stated purpose.

3. How We Protect Your Data

Our website uses HTTPS encryption for all data transmitted between your browser and our server
Access to personal data is limited to staff who need it to perform their role
Contact form submissions are stored on a secured server with access controls
In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority within the timeframe required by Thai PDPA

Note: for the Records Digitization service, the documents you bring to us are handled physically in your presence and returned to you. We do not retain digital copies after handback. No client documents are uploaded to external services.

4. Cookies

We use essential cookies to keep the website functioning correctly, and optional analytics and preference cookies only with your consent. You can manage your cookie preferences at any time via our Cookie Policy page. Your consent choice is saved in your browser and can be changed at any time.

5. Your Rights

Under the Thailand PDPA, you have the following rights regarding your personal data:

Right to access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate data
Right to erasure: request deletion of your data, subject to legal obligations
Right to data portability: request your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interest
Right to withdraw consent: withdraw consent for analytics cookies at any time without affecting prior processing
Right to lodge a complaint: with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been breached

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Third-Party Links

Our website may contain links to external resources or organisations. We are not responsible for the privacy practices of those sites and encourage you to read their individual privacy policies before sharing any personal data.

7. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. When material changes are made, we will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of our website following a policy update constitutes acceptance of the revised terms.

9. Contact for Privacy Matters

Data Controller: Stillhaven

Address: 118 Thanon Thalang, Talat Yai, Mueang Phuket, Phuket 83000, Thailand

Privacy enquiries: [email protected]

Phone: +66 76 245 8137