Privacy Notice & Consent

Privacy Notice for Website and Application of Pride Digital Health Co., Ltd. (www.pridehealth.care) & We Do Care Co., Ltd. (www.serenehospitalthailand.com)

Pride Digital Health Co., Ltd. (referred to as “PrideHealth”) and We Do Care Co., Ltd. (referred to as Serene Hospital) is committed to providing a safe and secure telehealth platform that respects and protects the privacy of all users. This privacy notice (the “Notice”) applies to the following websites and applications:

(hereinafter referred to as the “Website” and “Application”).

We understand the importance of safeguarding your personal data and your right to privacy as a user of our Website and Application (referred to as “User” or “you”). As a data controller under the Personal Data Protection Act B.E. 2562 (A.D. 2019) (“PDPA”), we have prepared this Privacy Notice to inform you of how your personal data will be collected, used, disclosed, and/or transferred (“processed” or “processing”) by PrideHealth & Serene Hospital.

We ensure that your personal data will be secured with stringent security standards throughout the processing procedure. We will not process your personal data for purposes other than those specified in this Notice unless you provide explicit consent.

1. Definitions

  • “Personal Data” refers to any information that identifies or can be used to identify you, which is collected by PrideHealth & Serene Hospital as specified in this Notice.
  • “Sensitive Data” refers to Personal Data classified as sensitive under the PDPA, which PrideHealth & Serene Hospital is permitted to collect, use, disclose, and/or transfer with your explicit consent, including but not limited to data related to health, sexual orientation, and biometric data.

2. Personal Data Collected, Used, and/or Disclosed by PrideHealth

We will collect, use, and/or disclose your Personal Data, including but not limited to the following:

  • General Personal Data:
    • Personal information: e.g., name, date of birth, gender, nationality, photograph, and contact details.
    • Financial information: e.g., bank account, credit or debit card information.
    • Account login information: e.g., username, social media account log-ins.
    • Automatically collected data: e.g., IP address, device ID, location, and session length.
  • Sensitive Data:
    • Health-related information: e.g., data about illnesses, medications, health reports, lab results, and diagnoses.
    • PrideHealth will ensure that any sensitive data you provide is handled with the highest level of security and confidentiality.

3. Source of Your Personal Data

We will receive your Personal Data through the following channels:

  • Registration via the Website or Application.
  • Data you voluntarily provide to request services through forms, social media, or other contact methods.
  • Registration and log-ins through third-party platforms such as Google, Facebook, and Apple.

4. Purposes and Legal Bases

We will process your Personal Data based on the following legal bases:

  • Contractual Obligations: To facilitate account registration, identity verification, patient registration, and service provision.
  • Legal Obligations: To comply with laws and regulations related to medical services and data processing.
  • Legitimate Interest: To improve service quality, manage bookings, and enhance your experience on the Website and Application.
  • Consent: For specific activities like sending promotions or analyzing health data, based on your explicit consent.

5. Disclosure of Your Personal Data

Your Personal Data may be disclosed to affiliates, partners, or third parties such as insurance companies, healthcare professionals, and service providers. We ensure that all parties involved will process your data in accordance with this Notice and applicable laws.

6. Retention Periods and Security Measures

  • Your Personal Data will be retained as long as necessary to fulfill the purposes outlined in this Notice.
  • We have implemented security measures to protect your data from unauthorized access, loss, or misuse.

7. User’s Rights as the Data Subject

As a Data Subject, you have the right to:

  • Access, correct, or delete your Personal Data.
  • Withdraw your consent at any time.
  • File a complaint with the competent authority if you believe your rights under the PDPA have been violated.

8. Cookies

We may use cookies to enhance your experience on the Website. You can manage cookie preferences through your browser settings, though disabling cookies may affect your experience.

9. Amendment

PrideHealth & Serene Hospital reserves the right to modify this Notice in compliance with applicable laws and regulations. Any changes will be communicated through the Website.

Pride Digital Health Co., Ltd. Privacy Notice
(www.pridehealth.care)

Pride Digital Health Co., Ltd. (hereinafter referred to as “Pride Health” or “we,” as the case may be) is a telehealth service provider committed to offering LGBTQ-friendly healthcare services. As the data controller under the Personal Data Protection Act B.E. 2562 (A.D. 2019) (“PDPA”), Pride Health recognizes the importance of protecting the personal data of our clients, contacts, emergency contacts, and others involved with our services (hereinafter referred to as “you” or “Data Subject”). Therefore, we present this Privacy Notice (the “Notice”) to inform you of how your personal data is collected, used, disclosed, and/or transferred (“process” or “processing”) to any relevant persons by Pride Health.

We ensure that your personal data will be securely processed according to our stringent security measures. We will not process your personal data for any purposes other than those specified in this Notice unless you provide explicit consent.

Definitions

  • “Personal Data” refers to any information that identifies or can be used to identify you, which is collected by Pride Health as specified in this Notice.
  • “Sensitive Data” refers to personal data classified as sensitive under the PDPA, which Pride Health is permitted to collect, use, disclose, and/or transfer with your explicit consent. This includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, health information, disabilities, genetic data, biometric data, and other similar data.

Personal Data Collected by Pride Health

Pride Health will collect, use, disclose, and/or transfer your Personal Data, which includes but is not limited to:

  1. General Personal Data:
    • Personal information: title, first name, last name, age, date of birth, gender, photograph, nationality, and marital status.
    • Contact information: address, phone number, and email address.
    • Service information: records of appointments, consultation details, and other service requirements.
    • Legal documents: national ID card, passport, driver’s license, etc.
    • Financial information: billing details, credit/debit card information, and bank account details.
    • Online information: IP address, cookies, online consultation details.
    • Other: audio recordings, images, and videos from any consultations or telehealth sessions.
  2. Sensitive Data:
    • Data concerning health, disabilities, treatment history, genetic or biometric data, and other health-related information.
    • Data that may appear on identification cards such as religion and blood type (to be concealed unless necessary).

Source of Your Personal Data

We may collect your Personal Data directly from you through our website, social media, phone calls, and other forms or communications. We may also receive your Personal Data from third parties, such as family members, representatives, or partner organizations.

Purposes and Legal Bases

We will process your Personal Data based on the following legal bases:

  1. Contractual Basis: To process your service requests, manage appointments, communicate for service delivery, issue invoices, and fulfill contractual obligations.
  2. Legitimate Interest: To verify your identity, manage client relationships, monitor service quality, and ensure compliance with our policies.
  3. Legal Obligations: To comply with laws related to healthcare services, patient registration, and other legal requirements.
  4. Vital Interests: To protect your life, health, and safety in emergencies.
  5. Consent: To send you information about services, promotions, or events that may be of interest to you.

For Sensitive Data, we rely on the following bases:

  1. Legal Obligations: For healthcare services, including diagnosis, treatment, and health management.
  2. Public Health: For healthcare service quality improvement and disease prevention.
  3. Vital Interests: To protect your life and health in emergencies.
  4. Consent: For specific purposes like sharing health data with third parties at your request.

Disclosure of Your Personal Data

We will not disclose your Personal Data for purposes other than those specified in this Notice unless you have provided consent. Your data may be transferred outside Thailand and shared with our international partners for service delivery. We will ensure that these parties process your data according to this Notice and legal requirements.

Retention Periods & Security Protection Measures

  1. Retention: We will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Notice, or as required by law.
  2. Security: We employ international-standard security measures to protect your data against unauthorized access, loss, or misuse.

Data Subject’s Rights

Under the PDPA, you have the right to:

  1. Access, copy, or transfer your Personal Data.
  2. Object to or request the deletion of your Personal Data.
  3. Withdraw your consent at any time.
  4. File a complaint if you believe your rights under the PDPA have been violated.

To exercise your rights, you may contact us using the information provided below. We will process your request and inform you of the outcome within 30 days.

Amendment

We reserve the right to update this Notice as necessary to comply with legal or regulatory requirements. We will notify you of any significant changes through appropriate channels.