Legal
Privacy Policy
Last Updated: 10 February 2025
Effective Date: 10 February 2025
Serahl ("we", "our", "us") is committed to handling your personal information with care and transparency. This Privacy Policy describes what data we collect, how we use it, and the rights you hold in relation to it. It applies to visitors to our website and to families and residents who engage with our care services.
1. Who We Are
Serahl operates a residential care facility at 14 Soi Pattanakarn 32, Suan Luang, Bangkok 10250, Thailand. We are the data controller for the personal information described in this policy. For privacy-related queries, contact us at [email protected].
2. Data We Collect
Information You Provide Directly
- Name, email address, and phone number (submitted via our contact form or by email)
- Details about a prospective or current resident's health needs and care requirements
- Family relationships and emergency contact details
- Financial information relating to care programme fees (billing only)
Information Collected Automatically
- Browser type, device type, and IP address when you visit our website
- Pages visited, time spent on site, and referring URLs (analytics cookies, if consented)
- Cookie preferences stored in your browser's local storage
3. How We Use Your Information
- Service delivery: To assess care needs, arrange facility visits, and provide ongoing care communication
- Communication: To respond to your enquiries and provide care updates to resident families
- Operational administration: Billing, scheduling, and care record management
- Website improvement: Aggregate analytics to understand how visitors use our site (analytics cookies only, with consent)
- Legal compliance: To meet obligations under Thai law, including PDPA, and health regulations
4. Legal Basis for Processing
- Consent: For marketing communications and non-essential cookies, we rely on your explicit consent
- Contract: To fulfil our care service agreement with you or your family
- Legitimate interests: For website analytics and security monitoring
- Legal obligation: Where Thai healthcare regulations require data retention or disclosure
5. Data Sharing
We do not sell personal data. We may share it with:
- Medical specialists, hospitals, and therapists involved in a resident's care (with family consent)
- Third-party service providers who support our website and operations (under data processing agreements)
- Regulatory authorities where required by Thai law
6. Data Retention
- Website enquiry data: up to 2 years from last contact
- Resident care records: 7 years following the end of a care arrangement, in line with Thai healthcare record-keeping standards
- Analytics data: aggregated, no personal retention beyond 26 months
7. Cookies
We use essential cookies to operate our website and, with your consent, analytics and preference cookies. For full details, please see our Cookie Policy.
8. Security
We apply appropriate technical and organisational measures to protect personal data — including access controls, secure storage practices, and staff confidentiality obligations. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant authority in accordance with Thai PDPA requirements.
9. Your Rights
Under the Thai Personal Data Protection Act (PDPA B.E. 2562), you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of data we no longer have grounds to retain
- Data portability — receive your data in a portable format where technically feasible
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, for data processed on the basis of consent
- Lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed
To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.
10. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.
11. Children's Privacy
Our services are directed at adults (18+) and their families. We do not knowingly collect data from individuals under the age of 18. If you believe such data has been submitted in error, please contact us promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Significant changes will be communicated to existing service users directly.
13. Contact Us
For any privacy-related questions:
- Email: [email protected]
- Address: Serahl, 14 Soi Pattanakarn 32, Suan Luang, Bangkok 10250, Thailand
- Phone: +66 2 718 5349