Privacy Policy

E2E Clinic 1788680174019 ("we") recognises the importance of protecting your personal data. This policy explains how we collect, use and disclose your personal data under the Personal Data Protection Act B.E. 2562 (2019).

This policy applies to the personal data of patients and staff that we collect through our channels, both online and at our premises.

We collect your full name, phone number, ID card number and health data, namely medical history, which is sensitive data under section 26, only to the extent necessary to provide medical services.

We also record CCTV footage on our premises for the safety of people and property. Details are set out in our CCTV Notice.

When you use our website or application, we may collect device data and cookies as described in our Cookie Policy.

We use your data for (a) providing medical treatment under our contract with you, (b) appointments and LINE reminders under our contract with you, and (c) promotions and news only with your consent

Where we collect data under a contract with you or a legal requirement, we may be unable to provide our services in full if you do not provide it.

For sensitive personal data, we will obtain your explicit consent before collection unless the law allows collection without consent.

We may disclose your data to laboratories / diagnostic centres and insurance companies as necessary. Recipients are bound to protect the data to the standard required by law.

We do not transfer your personal data outside Thailand unless the safeguards required by law are in place.

We retain medical records for at least 5 years from your last visit, as required by the law on medical facilities.

Other data is retained for the following periods: full name: 5 years; phone number: 5 years; ID card number: 5 years. When a period ends, we delete or anonymise the data.

CCTV footage is kept for 30 days unless it must be retained as evidence under the law.

You have the right to access, rectify, erase, restrict, object, port and withdraw consent under sections 30–36, by submitting a request through our online form.

Withdrawing consent does not affect any collection, use or disclosure lawfully carried out beforehand. If you believe we have breached the law, you have the right to lodge a complaint with the Personal Data Protection Committee.

Contact for personal data matters: clinic@example.com, tel. 053-123456

Data controller: E2E Clinic 1788680174019, 99 ถนนทดสอบ เชียงใหม่ 50200

We may update this notice from time to time when the law, our services or the way we process data changes. The version in force is the one bearing the effective date shown in this document. For material changes we will inform you through the same channel by which you received this notice before they take effect.