01Information we collect
We collect only what we need to provide safe, personalised care. This includes:
- Identity data — full name, date of birth, nationality, ID / passport number for medical-record matching.
- Contact data — mobile, email, LINE ID, emergency contact.
- Medical data — medical history, allergies, medications, treatment photos, consent forms, aftercare notes.
- Financial data — invoices, card tokens (processed by PCI-compliant partners — we never store full card numbers).
- Website data — IP address, device type, browser, pages visited.
02How we use your information
We use your data strictly for purposes you would reasonably expect from a medical provider: to deliver your treatment safely, confirm appointments, process payments, comply with medical-council record-keeping, and improve services. We will never sell your data, and we only send marketing communications with your explicit opt-in consent.
03Medical records & confidentiality
Clinical records are kept under physician-patient privilege and accessible only to the treating doctor, your assigned nurse, and authorised clinic staff bound by confidentiality. Before/after photography is taken only with your written consent.
04Sharing with third parties
We share your information only when strictly necessary and under contractual confidentiality: referral specialists, laboratories & pharmacies, payment & booking providers, and regulatory authorities where required by law.
05Cookies & website analytics
Our website uses cookies to remember your language, improve loading speed, and understand which pages are most useful. We use analytics with IP anonymisation. Disabling cookies will not affect your medical records.
06Data retention
Medical records are retained for the minimum period required by Thai regulation — typically 10 years after your last visit. Marketing-related data is retained only while you remain opted in.
07Your rights under PDPA
Under Thailand's Personal Data Protection Act, you have the right to access, correct, erase, withdraw consent, obtain a portable copy, object to or restrict processing, and lodge a complaint with the PDPC. We respond within 30 days.
08International transfers
For international patients, your data may be accessed from your country of residence for continued care. We transfer data only to jurisdictions with adequate protection or under standard contractual clauses.
09Changes to this policy
We may update this policy to reflect new services, technology, or legal requirements. Material changes will be communicated on this page and — where appropriate — by email or LINE.
10Contact our Data Protection Officer
To exercise any right, or for any privacy inquiry, please use the contact details below.