Privacy Policy

1. Data We Collect

We collect personal information in the following categories:

Enquiry and contact data: Name, email address, phone number, and the content of any message submitted through our website contact form or provided by telephone or email.

Resident and family data: For those who proceed to a placement, we collect health and medical information, emergency contact details, next-of-kin information, financial arrangements, and documentation required for residential registration. This information is collected directly and with informed consent.

Website usage data: Where analytics cookies are accepted, we collect anonymised information about how visitors use our website (pages visited, session duration). No personally identifying data is collected through analytics alone.

2. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries about availability, room options, and care arrangements
• Managing the day-to-day care and wellbeing of residents
• Communicating with family members and authorised contacts
• Coordinating with medical professionals and external services on behalf of residents
• Fulfilling our registration and reporting obligations to provincial authorities
• Improving our website and services through aggregate, anonymised analytics

We do not use personal data for marketing communications without explicit consent. We do not sell, rent, or otherwise share personal data with third parties for commercial purposes.

3. Legal Basis for Processing

Under the PDPA, we process personal data on the following legal grounds:

• Consent: For enquiries submitted through our contact form and for optional analytics cookies.
• Contractual necessity: For data required to provide residential care to residents.
• Legal obligation: For data required by provincial residential care registration and health regulations.
• Vital interests: For health and emergency data processed in the interest of a resident's safety.

4. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 12 months from the date of last contact if no placement proceeds
• Resident records: retained for 7 years following the end of residency, as required by Thai law
• Financial records: retained for 5 years for accounting and tax purposes
• Analytics data: anonymised, no retention period applies

5. Data Security

We take reasonable measures to protect personal information from unauthorised access, loss, or misuse. These measures include:

• Physical security of paper-based records (locked storage, restricted access)
• Password-protected digital records accessible only to authorised staff
• HTTPS encryption on our website
• Staff awareness of data handling obligations

In the event of a data breach affecting personal information, we will notify affected individuals and, where required, the relevant regulatory authority within the timeframes specified under the PDPA.

6. Cookies

Our website uses cookies. Essential cookies are required for basic site function. Optional analytics and preference cookies are only placed with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate information.
• Right to erasure: In certain circumstances, you may request deletion of your data.
• Right to data portability: You may request a machine-readable copy of your data where technically feasible.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may file a complaint with Thailand's Personal Data Protection Committee (PDPC).

8. Third-Party Services

Our website may use third-party services including:

• Google Analytics (if analytics cookies are accepted): anonymous usage data. Subject to Google's privacy policy.
• Google Maps: embedded map on our homepage. No personal data is transmitted unless you interact with the map directly. Subject to Google's privacy policy.

Links on our site to external organisations (hospitals, clinics, regional services) are provided for reference. dokbuiles is not responsible for the privacy practices of external sites.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us promptly and we will delete it.

10. Policy Updates

We may update this policy from time to time. Where changes are material, we will notify residents and their families directly. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our services after any update constitutes acceptance of the revised policy.