The Lotus Azure Medical Service (Saha Clinic) (“Lotus Azure”, “we”, “our”, “us”) is committed to protecting personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”), the Medical Facility Act, and applicable healthcare regulations.

This Privacy Policy describes how personal data is collected, used, disclosed, retained and protected in connection with website use and in-clinic medical services.

1. Categories of Personal Data Collected

We may collect, store and process the following categories of personal data:

• Identification information (full name, passport or national ID number, date of birth, gender, photograph)
• Contact information (address, telephone number, email address)
• Medical and health information (medical history, laboratory results, diagnostic reports, clinical findings)
• Employment, visa and institutional submission information
• Payment, billing and transaction information
• Website technical data (IP address, browser type, access logs, cookies)

2. Purpose of Collection and Use

Personal data is collected and processed for the following purposes:

• Provision of medical examinations, diagnostics, laboratory and clinical services
• Preparation, certification and issuance of medical reports
• Submission of medical results to embassies, employers, insurers and regulatory authorities
• Compliance with Thai legal, medical record retention and regulatory obligations
• Billing, accounting and payment processing
• Internal quality assurance, audit and operational improvement
• Patient communication and service coordination

3. Legal Basis for Processing

We process personal data on the basis of:

• Consent
• Performance of a medical service contract
• Compliance with legal obligations
• Protection of vital interests (medical safety)
• Legitimate interests of the clinic relating to service management and institutional operations

4. Disclosure of Personal Data

Personal data may be disclosed to:

• Thai government authorities and regulators
• Embassies, visa processing systems and institutional submission platforms
• Employers, insurers and corporate clients (where applicable)
• Partner laboratories, hospitals and licensed medical professionals involved in care
• IT, billing and administrative service providers under confidentiality agreements

All disclosures are limited to what is necessary and are carried out in accordance with PDPA.

5. Cross-Border Data Transfer

Where required for embassy, employment or regulatory submission, personal data may be transferred outside Thailand. Such transfers are carried out in compliance with PDPA requirements and applicable data protection safeguards.

6. Data Retention

Personal data is retained for the duration required by Thai law, medical record regulations and institutional policies. Upon expiry of retention periods, data will be securely destroyed or anonymized.

7. Data Security Measures

We implement administrative, technical and physical safeguards to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

8. Data Subject Rights

You have the right to:

• Request access to personal data
• Request correction of inaccurate data
• Request deletion or anonymization (subject to legal retention obligations)
• Withdraw consent
• Object to data processing
• Request data portability
• Lodge complaints with the Office of the Personal Data Protection Committee (PDPC)

Requests must be submitted in writing to the clinic.

9. Appointment of Data Protection Contact

For matters relating to personal data protection, you may contact:

The Lotus Azure Medical Service (Saha Clinic)
Email: Info@TheLotusAzure.Com

Bangkok, Thailand

10. Data Breach Notification

In the event of a personal data breach that may pose a risk to data subjects, Lotus Azure will notify the Office of the Personal Data Protection Committee (PDPC) and affected individuals in accordance with the Personal Data Protection Act (PDPA).

11. Cookies and Website Technologies

This website may use cookies and similar technologies to enhance functionality and user experience. Users may disable cookies via browser settings, which may affect certain site features.

12. Policy Amendments

We reserve the right to amend this Privacy Policy in accordance with legal or operational changes. Updates will be published on this website.

13. Contact Information

For data protection inquiries, requests or complaints:

The Lotus Azure Medical Service (Saha Clinic)
Email: Info@TheLotusAzure.Com

Bangkok, Thailand