Privacy Notice

In accordance with Thailand's Personal Data Protection Act (PDPA, B.E. 2562 / 2019).

Last updated: please customize per client.

1. Who we are

www.plusdentalclinic.com () is the data controller for personal data collected through this website. You can contact us at or .

2. What personal data we collect

• Contact details you provide when booking (name, phone, email, LINE ID)
• Appointment information (date, requested service, notes)
• Communication history with our clinic (messages, emails, phone records)
• Treatment and medical records collected during care, kept separately under medical confidentiality
• Basic technical data (browser, device type, pages viewed) for site operation

3. Why we collect it (lawful basis)

We collect personal data to provide the dental services you request, communicate with you about appointments, comply with our legal obligations as a healthcare provider, and improve our service. The lawful bases are: contract (to provide care), legitimate interest (to run our clinic safely), legal obligation (medical records retention), and consent (for marketing messages, where you have opted in).

4. How long we keep it

Treatment records are retained as required by Thai medical regulations. Booking and communication records are retained for as long as you remain a patient and for a reasonable period afterward to handle follow-up care or disputes. Marketing-consent records are kept until you withdraw consent.

5. Who we share it with

We do not sell personal data. We share it only with: our clinical staff, payment processors when you pay online, hosting and IT providers under data-processing agreements, and Thai government authorities where legally required.

6. Your rights under PDPA

As a data subject in Thailand, you have the right to:

• Withdraw consent at any time
• Access the personal data we hold about you
• Request correction of inaccurate data (rectification)
• Request deletion (erasure)
• Request suspension of use
• Request data portability where technically feasible
• Object to certain processing
• File a complaint with the Personal Data Protection Committee (PDPC)

To exercise any of these rights, contact us at or . We will respond within 30 days.

7. Cookies and analytics

This site uses only essential cookies required to operate. We do not use third-party tracking, advertising pixels, or behavioral analytics by default. If we add analytics later, this page and a cookie banner will be updated and your consent requested first.

8. Security

We use HTTPS, restrict access to patient records to authorized staff, and follow standard practices for password and account protection. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of healthcare data.

9. Changes to this notice

We may update this notice from time to time. Material changes will be communicated via our website or directly to patients we have a continuing relationship with.

Template note for the clinic: this notice is a structural template based on PDPA principles. Have it reviewed by Thai counsel and customized to reflect the clinic's actual practices, retention schedules, and processors before publication.