PRIVACY POLICY

Ponsarin Clinic

Effective Date: September 22, 2026

At Ponsarin Clinic, we respect your privacy and are committed to handling your personal information with care, confidentiality, and transparency.

As a doctor-led aesthetic and medical clinic located in Chiang Mai, Thailand, we understand the importance of protecting personal information, particularly information relating to your health and medical history.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact our clinic, or receive our services.

By providing your personal information to Ponsarin Clinic, you acknowledge that you have been informed of the practices described in this Privacy Policy.

1. Information We Collect

We may collect personal information when you contact our clinic, request an appointment, complete a medical history form, or receive our treatments and services.

The information we collect may include:

Personal and Contact Information

  • Full name

  • Email address

  • Telephone number

  • Preferred communication platform

  • Appointment details and treatment enquiries

  • Medical and Health Information

To provide appropriate medical and aesthetic services, we may collect information relating to your health, including:

  • Medical history and existing health conditions

  • Allergies and medication history

  • Previous aesthetic or medical treatments

  • Relevant health information required for treatment assessment

  • Treatment records and consultation notes

Medical information is collected to support treatment assessment, patient safety, and continuity of care.

We do not routinely collect patient photographs as part of our standard medical history process.

Website Usage Information

When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device information, pages visited, and website interaction data.

This information helps us understand website performance, maintain website functionality, and improve the visitor experience.

2. How We Collect Your Information

We may collect your personal information through the following channels:

Direct Communication

When you contact  Ponsarin Clinic through WhatsApp, LINE, email, Facebook Messenger, Instagram Direct Messages, or WeChat.

Medical History Forms

Before receiving certain treatments, you may be asked to complete a medical history form through Google Forms.

The information you provide helps our medical team assess your suitability for treatment and identify relevant health considerations.

In-Clinic Consultations

Additional personal and medical information may be collected during consultations and treatment appointments.

Website Technology

Our website is hosted on Squarespace, which may process certain technical and website usage information when you visit our website.

3. How We Use Your Personal Information

Ponsarin Clinic may use your personal information for the following purposes:

  • Responding to enquiries and providing information about our services.

  • Arranging, confirming, and managing appointments.

  • Conducting medical consultations and treatment assessments.

  • Maintaining patient records and treatment histories.

  • Providing appropriate aftercare and follow-up communication.

  • Managing customer relationships and improving our services.

  • Sending promotional information, special offers, and clinic updates where permitted.

  • Maintaining website functionality and improving the online experience.

  • Complying with applicable legal and regulatory obligations.

We process personal information only where an appropriate legal basis applies.

Where required by applicable law, we will obtain your consent before collecting or using your information for specific purposes.

4. Medical Information and Patient Confidentiality

Your medical information is particularly sensitive and is handled with appropriate confidentiality.

Medical history and treatment-related information may be accessed by authorised medical professionals and clinic personnel who require the information to provide or support your care.

We use medical information for purposes including treatment assessment, patient safety, treatment planning, medical record management, and appropriate follow-up care.

We do not use your medical history for promotional purposes without obtaining any consent required by applicable law.

We do not disclose your medical information to unrelated third parties for their independent marketing purposes.

Where required by law, we obtain explicit consent for the processing of sensitive personal information, including health information, unless another lawful exception applies.

5. Appointment and Communication Platforms

Our website provides direct links to external communication platforms, including:

  • WhatsApp

  • LINE

  • Email

  • Facebook Messenger

  • Instagram Direct Messages

  • WeChat

When you choose to contact us through one of these platforms, your information may also be processed by the relevant service provider according to its own privacy policy.

Ponsarin Clinic does not control the independent privacy practices of these external platforms.

We encourage you to avoid sending unnecessary sensitive medical information through general messaging services.

Where detailed medical information is required, our team may direct you to an appropriate medical history form or request that you provide the information during your consultation.

6. Google Forms and Medical History Records

Ponsarin Clinic uses Google Forms to collect medical history information from patients.

Information submitted through these forms may be processed and stored using Google's services.

Access to patient information is intended to be limited to authorised personnel who require it for legitimate clinical or administrative purposes.

Google may process or store information using infrastructure located outside Thailand.

For additional information about Google's data practices, please refer to Google's Privacy Policy.

We encourage patients to provide accurate and complete medical information to support appropriate treatment assessment and patient safety.

7. Marketing Communications

Ponsarin Clinic may send information about our treatments, clinic updates, special offers, and promotional activities through email, WhatsApp, LINE, or other communication channels.

We will obtain consent for marketing communications where required by applicable law.

You may withdraw your consent to receive promotional communications at any time.

To unsubscribe, you may contact us directly through your preferred communication channel or email us at: info@ponsarinclinic.com

Withdrawing consent for marketing communications will not affect necessary appointment confirmations, treatment-related communications, or other processing carried out on an appropriate legal basis.

We do not sell your personal information to third parties for their marketing purposes.

8. Cookies and Website Analytics

Our website is hosted by Squarespace and uses cookies and similar technologies.

Cookies are small data files that may be stored on your device when you visit a website.

Our website may use cookies for the following purposes:

  • Essential Cookies

  • These cookies support essential website functionality, security, and navigation.

  • Analytics and Performance Cookies

These cookies help us understand how visitors interact with our website, including website traffic, page visits, and general browsing activity.

We may use this information to improve website performance and the visitor experience.

Where required by applicable law, we will obtain your consent before activating non-essential cookies.

You may also manage cookies through your browser settings and any cookie preference controls available on our website.

For more information about cookies used by our website hosting provider, please refer to Squarespace's Cookie Policy.

9. Sharing Your Personal Information

We may share personal information with trusted third-party service providers where necessary to operate our clinic, maintain our website, communicate with patients, or provide our services.

These providers may include:

  • Squarespace, our website hosting provider.

  • Google, for medical history forms and related data storage.

  • Communication platforms used to manage customer enquiries and appointments.

  • Other service providers supporting our clinic's operations.

Where appropriate, we require service providers to handle personal information in accordance with applicable data protection requirements.

We may also disclose personal information where required by law, regulatory obligations, or lawful requests from relevant authorities.

We do not sell patient information to third parties.

10. International Data Transfers

Some third-party services used by Ponsarin Clinic, including website hosting, cloud storage, and communication platforms, may process or store personal information outside Thailand.

Where personal information is transferred internationally, we will take steps required by applicable data protection laws to ensure that such transfers are conducted on an appropriate legal basis and with applicable safeguards.

11. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing medical services, maintaining patient records, managing appointments, and meeting applicable legal obligations.

Medical records may be retained for periods required by applicable medical and healthcare regulations.

Where personal information is no longer required and no legal obligation or other lawful basis requires continued retention, we will take appropriate steps to securely delete, destroy, or anonymise the information.

12. Data Security

Ponsarin Clinic takes reasonable organisational and technical measures to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.

Access to personal and medical information is intended to be restricted to authorised personnel who require such information for legitimate clinical or administrative purposes.

However, no method of electronic transmission or digital storage can be guaranteed to be completely secure.

We encourage patients to contact us directly if they have concerns regarding the security or confidentiality of their personal information.

13. Your Privacy Rights

Subject to applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA), you may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your personal information in circumstances permitted by law.

  • Withdraw consent where processing is based on consent.

  • Object to certain processing activities.

  • Request restriction of processing in applicable circumstances.

  • Request the transfer of your personal information where legally applicable.

  • Lodge a complaint with the relevant data protection authority.

Certain requests may be subject to applicable legal obligations, including requirements relating to medical record retention.

To exercise your privacy rights, please contact us using the details provided below.

14. Third-Party Websites

Our website may contain links to external websites, communication platforms, and other third-party services.

These services operate independently and may have their own privacy policies and data protection practices.

Ponsarin Clinic is not responsible for the independent privacy practices of third-party websites or platforms.

We encourage you to review their privacy policies before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, website functionality, data processing practices, or applicable legal requirements.

Any updates will be published on this page, together with a revised effective date.

We encourage visitors and patients to review this page periodically.

16. Contact Us

If you have questions about this Privacy Policy, how your personal information is handled, or wish to exercise your privacy rights, please contact:

Ponsarin Clinic

Chiang Mai, Thailand

Our team will respond to your enquiry as soon as reasonably practicable.