PHIVARA ('we') is committed to protecting your privacy and complying with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy explains how we collect, use, disclose, and protect your personal data when you use our website and services.
1. Data Controller
Your personal data controller is [full legal entity name, e.g. PHIVARA Co., Ltd.], registered at [registered address]. For data protection questions, contact our Data Protection Officer (DPO) at [DPO email/phone].
2. Data We Collect
- Information you provide directly: full name, phone number, preferred branch and service, and any notes, when you submit an appointment request or contact form on our website.
- Website usage data: pages visited, collected only if you consent to analytics cookies.
- Data from third-party cookies/tracking technologies (Google Analytics, Meta Pixel), only when you click accept on our cookie banner.
3. Purpose of Collection and Use
- To contact you and process your consultation/appointment request.
- To improve our website and services.
- To analyze website usage and measure marketing campaigns, only with your consent.
4. Cookies and Tracking Technologies
This website always uses cookies essential to basic site functionality. Analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) only activate after you click accept on the cookie banner shown on your first visit. You can change your consent choice anytime via the 'Cookie Settings' link in the site footer.
5. Disclosure to Third Parties
We do not sell your personal data. We may share limited data with service providers necessary to operate our business, including Google (Google Analytics) and Meta Platforms (Meta Pixel), only with your consent, as well as technology providers that help us run our website and booking system.
6. Data Retention Period
We retain your appointment request data for [specify period, e.g. 24 months] from the date of contact, or until you request deletion, unless a longer period is required by law.
7. Your Rights as a Data Subject
Under the PDPA, you have the following rights regarding your personal data:
- The right to access and receive a copy of your personal data.
- The right to correct inaccurate data.
- The right to request deletion or destruction of data.
- The right to withdraw consent at any time.
- The right to object to the collection, use, or disclosure of your data.
- The right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe we have not complied with the law.
You may exercise these rights by contacting us through the channels listed under 'Contact Us' below.
8. Security Measures
We maintain appropriate technical and organizational measures to prevent unauthorized access, alteration, or disclosure of your personal data.
9. Changes to This Policy
We may update this policy from time to time. The most recent update date will be shown at the top of this page.
10. Contact Us
If you have questions about this policy or wish to exercise your rights, please contact [contact email] or call [contact phone].