Privacy Policy
Effective Date: 05/12/2024
The Body and Health Services (referred to as “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.
By using our website, www.thebodyandhealthservices.com, or our services, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.
1. Information We Collect
We collect the following types of personal data:
1.1 Personal Identifiable Information (PII):
- Full Name
- Contact Details (e.g., phone number, email address, mailing address)
- Passport or National ID number (when required for travel or medical purposes)
1.2 Medical Information:
- Medical history
- Treatment requirements or preferences
- Prescriptions and medical records (shared voluntarily for service provision)
1.3 Financial Information:
- Credit/debit card details (processed securely through third-party payment gateways)
- Billing and transaction information
1.4 Technical Information:
- IP address, browser type, and device information (for analytics and website functionality)
1.5 Travel Information:
- Flight details, travel preferences, and accommodation requirements
2. How We Use Your Data
We process your personal data for the following purposes:
- Service Fulfillment: To coordinate and provide medical and wellness travel services.
- Customer Support: To respond to inquiries and assist with bookings.
- Compliance: To meet regulatory and legal obligations, including visa or medical requirements.
- Marketing (with Consent): To share promotions, updates, and tailored offers.
3. Disclosure of Personal Data
We may share your data with the following third parties:
- Healthcare Providers: Hospitals, clinics, and wellness centers for medical or wellness services.
- Travel Partners: Airlines, hotels, and transport providers to arrange your itinerary.
- Service Providers: Payment processors and IT service providers to facilitate secure transactions and website functionality.
- Regulatory Authorities: When required by law, such as for visa applications or public health reporting.
We ensure all third-party partners adhere to strict confidentiality and data protection standards.
4. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, alteration, or disclosure. Measures include:
- Encryption of sensitive information during transmission.
- Restricted access to personal data for authorized personnel only.
- Regular review and updates of security protocols.
5. Your Rights Under PDPA
Under Thailand’s PDPA, you have the following rights regarding your personal data:
5.1 Right to Access
You can request access to your personal data and obtain a copy of the information we hold about you.
5.2 Right to Correction
You can request corrections to inaccurate or incomplete data.
5.3 Right to Deletion
You may request the deletion of your personal data under certain conditions, such as if it is no longer necessary for the purposes it was collected.
5.4 Right to Data Portability
You can request your data in a structured, commonly used, and machine-readable format.
5.5 Right to Withdraw Consent
You may withdraw consent for specific data processing activities at any time.
5.6 Right to Lodge Complaints
If you believe your data has been misused, you can file a complaint with the Personal Data Protection Committee (PDPC) in Thailand.
6. Retention of Data
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it.
7. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience and analyze website traffic.
8. Cross-Border Data Transfers
As part of our services, your personal data may be transferred to and stored in other countries. We ensure these transfers comply with PDPA requirements and provide equivalent levels of data protection.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. Any updates will be posted on this page, and significant changes will be communicated to you.
10. Contact Us
If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights under PDPA, please contact us at:
Email: support@thebodyandhealthservices.com
By using our services, you confirm that you have read and understood this Privacy Policy. Thank you for trusting The Body and Health Services with your personal data.