Legal
Privacy Policy
Last Updated: 10 February 2025 | Zindara, Chiang Mai, Thailand
1. Introduction
Zindara ("we", "us", "our") is a residential elderly care facility located at 8/15 Soi Nimmanhemin 9, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand. We are committed to handling personal information with care and transparency. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with enquiries, care arrangements, and use of our website.
For questions about this policy, please contact us at [email protected].
2. Data We Collect
Information you provide directly
- Name, email address, telephone number, and message content submitted via our website contact form
- Health and care-related information shared as part of a residential care enquiry or admission process
- Family relationship details provided for care coordination purposes
Information collected automatically
- Browser type and version, referring pages, and approximate geographic location via standard web server logs
- Cookie data, including analytics data where consent has been given (see our Cookie Policy for details)
Legal basis for processing (Thailand PDPA)
We process personal data under the following legal bases as defined by Thailand's Personal Data Protection Act B.E. 2562 (2019): consent (for marketing and analytics); contractual necessity (for service delivery); and legitimate interests (for operational communications and safety).
3. How We Use Your Information
- To respond to enquiries sent via our website contact form
- To assess care suitability and develop individual care plans for prospective and current residents
- To communicate with families and authorised contacts regarding a resident's care and wellbeing
- To coordinate with external healthcare providers involved in a resident's care, with the appropriate consent
- To improve our website and services using anonymised analytics data where consent has been given
- To comply with legal and regulatory obligations
Data retention
Enquiry data is retained for up to 12 months unless a care arrangement is established. Resident care records are retained for a minimum of 7 years following the end of a care arrangement, as required under Thai healthcare regulations. Marketing preferences are retained until withdrawn.
4. Data Sharing
We do not sell personal data to third parties. We may share personal information in the following circumstances:
- With external healthcare providers (GPs, hospitals, specialists) directly involved in a resident's care, with consent
- With analytics service providers (such as Google Analytics) where cookie consent has been given
- Where required by law, court order, or regulatory authority in Thailand
- With professional advisors (legal, financial) who are bound by confidentiality obligations
5. Data Protection Measures
- Our website uses HTTPS encryption for all data transmission
- Access to personal data is restricted to authorised staff members on a need-to-know basis
- Physical records containing personal information are stored securely and accessible only to authorised care staff
- We conduct periodic internal reviews of our data handling practices
- In the event of a data breach, we will notify affected individuals and the relevant Thai authority within 72 hours where required
6. Cookies
Our website uses cookies to improve performance and understand how visitors use the site. You can review the types of cookies we use and manage your preferences via our Cookie Policy. Essential cookies cannot be disabled as they are necessary for the site to function. All other cookie categories require your consent.
7. Your Rights Under Thailand's PDPA
Under Thailand's Personal Data Protection Act, you have the following rights with respect to your personal data:
- Access: You may request a copy of the personal data we hold about you
- Rectification: You may request correction of inaccurate or incomplete data
- Erasure: You may request deletion of your data where there is no lawful basis for continued processing
- Portability: You may request your data in a structured, machine-readable format where technically feasible
- Restriction: You may request that we limit how we use your data in certain circumstances
- Objection: You may object to processing based on legitimate interests
- Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are dissatisfied with our response, you may lodge a complaint with Thailand's Office of the Personal Data Protection Commission (PDPC).
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before sharing personal information with them.
9. Children and Minors
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor's data has been submitted to us inadvertently, please contact us and we will remove it promptly.
10. Policy Updates
We may update this Privacy Policy from time to time. When changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website following updates constitutes acceptance of the revised policy. Where required by law, we will notify affected individuals directly.
11. Contact
For all privacy-related enquiries, please contact us at:
Zindara
8/15 Soi Nimmanhemin 9, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 894 261