Privacy Policy
Last Updated: 2024-12-03
At Verzo Clinic, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with Thailand's Personal Data Protection Act (PDPA), the European Union's General Data Protection Regulation (GDPR), and Japan's Act on the Protection of Personal Information (APPI).
1. Data Controller
Verzo Clinic is the data controller responsible for your personal data. Our clinic is located at 988-990-992 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand. For any privacy-related inquiries, you can contact our Data Protection Officer at [email protected] or call +66 95 326 6644.
2. Purpose of Data Collection
We collect and process your personal data for the following purposes: (1) Scheduling and managing appointments, (2) Providing medical treatments and consultations, (3) Maintaining your medical history for continuity of care, (4) Communicating with you about your treatments and follow-up care, (5) Processing payments, (6) Complying with legal and regulatory requirements, (7) Improving our services through anonymized analytics.
3. Types of Data We Collect
We collect the following categories of personal data: (1) Identity data: Name, date of birth, nationality, (2) Contact data: Email address, phone number, LINE ID, (3) Medical data: Medical history, treatment records, before/after photographs (with explicit consent), (4) Financial data: Payment information for processing transactions, (5) Technical data: IP address, browser type, device information when using our website.
4. Sensitive Personal Data
Medical records and health information are classified as sensitive personal data under PDPA, GDPR, and APPI. We process this data only with your explicit consent and implement the highest security measures to protect it. All medical photographs are used only with written permission and can be anonymized upon request. We never share your medical data with third parties for marketing purposes.
5. Compliance with APPI (Japan)
For Japanese clients: We handle your personal data in accordance with the Act on the Protection of Personal Information (APPI) of Japan. Your medical records and personal details are strictly confidential and will not be provided to third parties without your prior consent. Safety Control Measures: We implement organizational, personnel, physical, and technical security measures to appropriately protect your personal information. Cross-border Transfer Notice: Your personal data is stored securely on servers in Thailand that meet international security standards. Data transfers from Japan to Thailand comply with APPI cross-border transfer requirements and are conducted with your consent.
6. Data Retention Period
We retain your personal data for the following periods: (1) Medical records: 10 years from your last treatment, as required by Thai medical regulations, (2) Contact information: Until you request deletion or withdraw consent, (3) Payment records: 7 years for tax and accounting purposes, (4) Marketing preferences: Until you unsubscribe or withdraw consent, (5) Website analytics: 26 months (anonymized data).
7. Your Rights
Under PDPA (Thailand), GDPR (EU), and APPI (Japan), you have the following rights: (1) Right to Access: Request a copy of your personal data, (2) Right to Rectification: Correct inaccurate or incomplete data, (3) Right to Erasure: Request deletion of your data (subject to legal retention requirements), (4) Right to Portability: Receive your data in a portable format, (5) Right to Withdraw Consent: Withdraw your consent at any time, (6) Right to Object: Object to processing for direct marketing, (7) Right to Complain: Lodge a complaint with the relevant supervisory authority.
8. International Data Transfer
Your data is primarily stored on secure servers located in Singapore and the United States through our service providers who comply with international data protection standards. When transferring data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers to countries without adequacy decisions.
9. Contact Our Data Protection Officer
For any questions about this Privacy Policy or to exercise your data rights, please contact our Data Protection Officer: Email: [email protected], Phone: +66 95 326 6644, LINE: @verzo, Address: 988-990-992 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand. We will respond to your request within 30 days.
About Patient Photos
All patient photos displayed on this website are used with explicit written consent. Use of these images by third parties without permission is strictly prohibited. Patients have the right to request removal of their images at any time.