Privacy Policy

Introduction

petalresa is committed to protecting the privacy and personal information of residents, their families, and visitors. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and international privacy standards.

By using our services or visiting our facility, you agree to the collection and use of information as described in this policy. If you have questions or concerns about how we handle your information, please contact us at [email protected].

Information We Collect

We collect the following types of personal information:

From Residents and Families:

• Full name, date of birth, and contact information
• Emergency contact details for family members
• Health information relevant to daily care needs (not medical records)
• Personal preferences for meals, activities, and routines
• Financial information for billing purposes
• Communication preferences and family contact schedules

From Website Visitors:

• Name and email address when submitting contact forms
• Phone numbers if provided
• Technical information through cookies (see Cookie Policy)

How We Use Your Information

We use personal information for the following purposes:

• Service Delivery: To provide daily care, activities, meals, and accommodation according to each resident's preferences and needs
• Family Communication: To provide updates to designated family contacts, coordinate visits, and respond to inquiries
• Billing and Administration: To process monthly payments and maintain accurate financial records
• Safety and Security: To maintain resident safety through emergency contact information and care protocols
• Service Improvement: To understand how we can better serve residents and their families
• Legal Compliance: To meet requirements under Thai law regarding residential care facilities

Legal Basis for Processing

We process personal data based on:

• Consent: You or your family members have given clear consent for us to process personal information for specific purposes
• Contract: Processing is necessary to fulfill our residential care agreement
• Legal Obligation: Processing is required under Thai law for operating a residential care facility
• Legitimate Interest: Processing is necessary for our legitimate business interests in providing quality care while respecting privacy rights

Data Sharing and Disclosure

We do not sell or rent personal information. We may share information in these limited circumstances:

• Authorized Family Members: Information shared with family contacts designated by the resident or legal representative
• Service Providers: Trusted third parties who assist with billing, facilities management, or activity supplies, bound by confidentiality agreements
• Healthcare Providers: When coordinated by families for medical appointments or consultations
• Legal Requirements: If required by Thai law, court order, or government authorities
• Emergency Situations: When necessary to protect the health, safety, or rights of residents

Data Security Measures

We protect personal information through:

• Physical security measures at our facility with controlled access to resident records
• Digital security including password protection for electronic records
• Staff training on privacy practices and confidentiality requirements
• Limited access policies ensuring only authorized staff access personal information as needed for their roles
• Regular review of security practices and data handling procedures

While we implement reasonable security measures, no method of transmission or storage is completely secure. We cannot absolutely guarantee the security of your information.

Data Retention

We retain personal information for the following periods:

• Resident Records: Maintained during residency and for seven years after departure, as required by Thai law
• Financial Records: Retained for seven years for tax and accounting purposes
• Contact Form Submissions: Retained for two years unless you request earlier deletion
• Marketing Communications: Retained until you withdraw consent or request removal

After retention periods expire, we securely dispose of personal information through shredding of physical documents and deletion of electronic records.

Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights:

• Access: Request copies of personal information we hold about you or your loved one
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of personal data in certain circumstances
• Data Portability: Receive personal information in a structured, commonly used format
• Objection: Object to processing of personal information for specific purposes
• Restriction: Request limitation on how we use your information
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise these rights, contact us at [email protected] or call +66 44 316 728. We respond to requests within 30 days.

Cookies and Website Data

Our website uses cookies to improve user experience and analyze site usage. For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to external sites not operated by petalresa. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

Children's Privacy

petalresa services are designed for seniors and their families. We do not knowingly collect information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify residents and families through written communication and update the "Last Updated" date at the top of this policy. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Us

For questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information:

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC). Contact information for the PDPC can be found at the Office of the Personal Data Protection Committee website.