Privacy Policy

This website, alive.vachiraphuket.go.th(the “Site”), is operated by ALIVE Wellness Clinic, a department of Vachira Phuket Hospital. For the purposes of the Thai Personal Data Protection Act B.E. 2562 (PDPA), Vachira Phuket Hospital is the data controller.

Controller address: Vachira Phuket Hospital, Emergency and Heart Center Building, 10th Floor, 353 Thanon Yaowarat, Tambon Taladyai, Mueang Phuket, Phuket 83000, Thailand. Tel. 086 304 8498

Data Protection Officer (DPO): In accordance with section 41 of the PDPA, Vachira Phuket Hospital, as a government agency, has designated a Data Protection Officer:

Name: Ms. Walaiporn Arunrat (นางสาววลัยพร อรุณรัตน์)
Email: dpo@vachiraphuket.go.th
Tel.: 0-7636-1234 ext. 1913

This Policy applies only to personal data collected through this website (alive.vachiraphuket.go.th). It does not cover:

• Personal data collected through the hospital’s clinical systems (HIS, electronic health records, or any appointment and telemedicine platforms)
• Data collected in person at the clinic

Important: This website is a marketing and information site only. It does not provide medical consultations, accept appointment bookings, or process health records online.

The Site collects only the minimum data necessary to operate and secure the website:

• Server logs. Standard technical data including IP address, browser type, referring page, and timestamps, retained for up to 90 days for security and operational purposes.
• Cookie preference. A single first-party cookie (alive-cookie-consent) records your choice on the cookie banner. This cookie contains no personal data.
• Third-party embed data. When you consent and load the embedded Google Map on the Contact page, Google receives your IP address and browser information directly. This is governed by Google’s Privacy Policy.

We do not collect health data, medical records, names, email addresses, or any sensitive personal data through this website.

The Site’s content database and uploaded media files are stored on a server located in Bangkok, Thailand, so that website data resides primarily in Thailand. We use a small number of vendors to operate the Site:

• VP InfoTech (Thailand)— provides the server hosting the Site’s content database and media files, in an ISO/IEC 27001-certified data centre in Bangkok, Thailand.
• Vercel Inc.— serves the website pages from its Singapore region. Standard request data (server logs) is processed under Vercel’s Data Processing Addendum.
• Cloudflare, Inc.— provides the API layer (Cloudflare Workers) that delivers content from the database to the website. Requests are processed on Cloudflare’s edge network under Cloudflare’s Data Processing Addendum; Cloudflare may cache public content on edge nodes globally to improve performance, and no personal data is stored in edge cache.
• Google LLC— Google Maps is embedded on the Contact page and loads only after you consent. Google’s data practices are governed by Google’s Privacy Policy and Google Maps Platform Terms.

We do not use advertising networks, analytics trackers, or retargeting pixels.

We do not sell or rent personal data. We share data only:

• with the vendors named in section 6, solely to operate this website
• as required by Thai law, court order, or lawful request by a competent authority
• to protect the safety of patients, staff, or visitors

Under the PDPA (sections 30–37) you have the right to:

• Access (s.30) — request a copy of personal data we hold about you
• Rectification (s.34) — ask us to correct inaccurate data
• Erasure (s.33) — ask us to delete your data where lawful
• Restriction (s.35) — ask us to limit how we process your data
• Portability (s.31) — receive your data in a portable format
• Objection (s.32) — object to processing based on legitimate interest
• Withdrawal of consent (s.19) — withdraw consent at any time
• Complaint (s.73) — lodge a complaint with the Personal Data Protection Committee of Thailand (PDPC)

To exercise any right, contact our DPO at the details in section 1. We will respond within the timeframes set by the PDPA.

This Site uses HTTPS (TLS) encryption. The server infrastructure complies with the National Cybersecurity Committee Announcement on Website Security Standards B.E. 2568 and applicable Ministry of Public Health information security guidelines.

We may update this Policy from time to time. Material changes will be notified by updating the “Last updated” date above. We encourage you to review this Policy periodically.

For privacy-related enquiries or to exercise your PDPA rights, please contact:

ALIVE Wellness Clinic, Vachira Phuket Hospital
Emergency and Heart Center Building, 10th Floor
353 Thanon Yaowarat, Tambon Taladyai, Mueang Phuket, Phuket 83000, Thailand
Tel. 086 304 8498 · Email alive@vachiraphuket.go.th

See also the hospital’s privacy policy at www.vachiraphuket.go.th/home-2/privacy-policy.