Privacy Policy

1. Introduction

Estara ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what personal information we collect, why we collect it, and what rights you have in relation to it. It applies to all individuals who contact us, use our services, or visit our website at https://estara.cyou.

We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), and apply its requirements across all our activities. Our principal place of business is at 14/22 Chaeng Watthana Road, Pak Kret, Nonthaburi 11120, Thailand.

2. Data We Collect

We collect the following personal information:

• Contact details: name, email address, telephone number, as provided via our contact form or directly
• Enquiry content: information included in messages you send us
• Service-related records: information relevant to the engagement, agreed in writing with you before work begins
• Website usage data: pages visited, time on site, referral source — collected via analytics cookies if consent is given

We do not collect sensitive personal data (health, financial account numbers, identity document numbers) unless you provide it in the course of an engagement, in which case it is handled under a separate written confidentiality arrangement.

3. How We Use Your Data

We use the data we hold to:

• Respond to enquiries and communicate about potential or active engagements
• Deliver the service you have engaged us for
• Send administrative communications about your engagement (invoices, session confirmations)
• Improve the performance and content of our website

We do not use your personal data for unsolicited marketing. We do not share, sell, or provide your data to third parties for their own marketing purposes.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases:

• Contract: to fulfil an engagement you have requested
• Legitimate interest: to respond to enquiries and manage our business operations
• Consent: for optional analytics cookies (can be withdrawn at any time)

5. Data Retention

Contact enquiry data is retained for up to 12 months from the last communication. Engagement records are retained for 5 years from the close of the engagement, after which they are securely deleted. You may request earlier deletion — see Section 8.

6. Data Protection Measures

Personal data held digitally is stored on password-protected systems with access limited to the Estara team members involved in your engagement. Physical documents you handle during sessions remain in your possession at all times — we do not take copies.

In the event of a personal data breach that may affect your rights, we will notify you within 72 hours of becoming aware of it, as required by the PDPA.

7. Cookies

Our website uses cookies to support basic functionality and, where you have given consent, to understand how the site is used. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

8. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to lawful retention obligations)
• Object to processing based on legitimate interest
• Withdraw consent for optional processing (such as analytics) at any time
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

10. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have done so inadvertently, please contact us and we will delete the data.

11. Changes to This Policy

We may update this policy from time to time. The current version is always available at https://estara.cyou/privacy-policy.html. Continued use of our services following a material update constitutes acceptance of the revised policy.

12. Contact

For any questions about this policy or your personal data, please contact us: