Juthamas Clinicคลินิกเวชกรรมจุฑามาศ
Back to home

Privacy Policy

Effective 29 October 2026 · Last updated 29 October 2026
Prepared in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA)

Juthamas Clinic is committed to protecting the personal data of our patients and website visitors. This policy explains what data we collect, why we use it, who we share it with, how long we keep it, and what rights you have.

1. Data Controller

Juthamas Clinic
Healthcare facility licence no. 10101058765
Clinic operator: Dr. Chayooth Thanapornsangsuth, M.D.
99/111 Soi Ngam Wong Wan 26, Thung Song Hong, Lak Si, Bangkok 10210, Thailand
Tel +66 90 665 9384 · LINE @ecl0443p · www.juthamasclinic.com · Email juthamas.mbk@gmail.com

2. Data We Collect

2.1 When you visit the clinic

2.2 When you use the booking or prescription refill form on our website

These forms work by opening the LINE application and sending your request to our official account. The information you enter is therefore also transmitted through and stored by LINE.

2.3 When you order products online

2.4 When you contact us via LINE Official Account

2.5 When you browse our website

3. Sensitive Data and Legal Basis

Health data is sensitive personal data under Section 26 of the PDPA. We process it under the exemption in Section 26 (5) (a): processing necessary for preventive medicine, medical diagnosis, and the provision of medical services by a licensed medical practitioner bound by a legal duty of confidentiality.

Before-and-after photographs will never be used for publicity, publication, or teaching unless you have given separate, explicit written consent. You may withdraw that consent at any time, and doing so will not affect your right to receive treatment.

4. Purposes of Processing

PurposeLegal basis
Examination, diagnosis, treatment, and follow-upSection 26 (5) (a) — provision of medical services
Creating and retaining medical records as required by lawLegal obligation — Sanatorium Act B.E. 2541, Section 35 (3)
Scheduling, confirming, and reminding you of appointmentsPerformance of a contract / legitimate interest
Receiving refill requests, preparing medication, arranging collectionSection 26 (5) (a) and performance of a contract
Selling and delivering products, issuing receipts, receiving paymentPerformance of a contract / tax and accounting obligations
Answering enquiries and customer serviceLegitimate interest
Sending news, promotions, and marketing communicationsConsent — withdrawable at any time
Using before-and-after images for publicity or teachingExplicit consent — withdrawable at any time
Improving the website and analysing visit statisticsLegitimate interest

5. Disclosure of Data

We do not sell your personal data. We disclose it only as necessary to:

6. International Transfers

Some of our service providers, including the LINE platform and our website statistics service, process data on servers located outside Thailand. We select providers that maintain adequate personal data protection measures as required by the PDPA.

7. Retention Periods

Type of dataRetention period
Medical records and treatment documentationNot less than 5 years from the date created, per Sanatorium Act Section 35 (3)
Sales and financial records5 years, per accounting and tax law
LINE conversation history and marketing contact dataNo more than 2 years from last contact, or until you withdraw consent
Website analytics dataNo more than 2 years

After these periods we delete, destroy, or anonymise the data.

8. Your Rights

  1. Right of access and to obtain a copy of your personal data
  2. Right to data portability
  3. Right to object to collection, use, or disclosure
  4. Right to erasure or destruction, to the extent not conflicting with our legal duty to retain medical records
  5. Right to restrict processing
  6. Right to rectification of inaccurate or outdated data
  7. Right to withdraw consent at any time, without affecting the lawfulness of prior processing
  8. Right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any right, contact us using the details in Section 1. We will verify your identity before acting and will respond within 30 days of receiving your request. There is no charge, unless a request is excessive or repetitive.

9. Cookies

You can delete or block cookies in your browser settings, though some features of the website may then not work properly.

10. Data Security

We restrict access to personal data to staff who need it to perform their duties, serve our website over an encrypted connection (HTTPS), and require all staff to maintain patient confidentiality in accordance with professional ethics.

11. Minors

Where a patient is under 20 years of age and has not attained legal majority through marriage, consent must be given by the person with parental authority, except where the law provides otherwise.

12. Changes to This Policy

We may update this policy from time to time. The date of the latest revision appears at the top of this page. If we make material changes, we will notify you through appropriate channels.

Juthamas Clinic · Healthcare facility licence no. 10101058765 · Clinic operator: Dr. Chayooth Thanapornsangsuth, M.D.
ฉบับภาษาไทย