Privacy Notice

Chanya Group Co., Ltd. (the “Company”) has established and published this Privacy Notice (“Privacy Notice”) to explain the details regarding the collection, use or disclosure of your personal data, as customers of Better Me Clinic, as well as how we protect and properly handle such personal data in accordance with Personal Data Protection Act B.E. 2562 (“PDPA”).

We regularly review and, if appropriate, update this Privacy Notice from time to time to ensure that your personal data is properly protected. In case of any significant update to this Privacy Notice, we will notify you by publishing the updated information through appropriate channel(s).

1. Personal data we collect

1.1 What is personal data?

Personal data means any information relating to an individual, which enables the identification of such individual, whether directly or indirectly, but not including the information of the deceased persons in particular.

1.2 Personal data we collect 

We collect various types of personal data, including:

• Identity data, such as name, surname, identification card number, passport number, date of birth, gender, age, weight, height, nationality, photos, occupation, including sensitive personal data which is necessary for the treatment and service provision, such as health data, medical history, skin condition, blood type, medication history or drug allergies;
• Contact data, such as address, telephone number, e-mail, emergency contact information, and social media contact information (e.g., LINE ID, Instagram account, TikTok, or Facebook account;
• Financial or transaction data, such as payment information;

Other data, such as comments, responses to surveys or assessments,

1.3 Sources of information

We may collect your personal data from various sources as follows:

• When you visit the website or inquire about product or service information;
• When you use services, fill out forms, complete surveys, or make registrations;
• Your communication with us via our contact channels, such as telephone, e-mail, LINE application, Facebook Messenger, etc.

2. Purposes for the collection, use or disclosure of personal data

We collect, use or disclose your personal data for various purposes as follows:

1. To perform registration and create a service recipient profile. 
2. To process requests related to products or services, including providing consultations, performing treatments, surgeries, and medical procedures, as well as follow-up care.
3. To carry out other activities related to product orders or service provision, such as making appointments, appointment confirmations, and payments.
4. To maintain the relationship with the Company’s customers, such as communicating with you to provide information about the Company’s products and services according to your interests, managing complaints, etc. 
5. For marketing purposes, such as offering products or services, offering benefits, promotional campaigns, conducting marketing activities, or sharing news about the Company’s products and services.
6. To survey your satisfaction with the Company’s products and services.
7. For business planning, reporting, and forecasting purposes.
8. To comply with laws, rules, orders, regulations, and legal duties of the Company, including reporting or disclosing information to government agencies, such as the Revenue Department, or upon receiving an order or a writ of attachment from police officers, government authorities, courts, or other competent authorities, to undertake detection and investigation under legal procedures and other regulations including to establish, comply or exercise the rights to legal claims or defend against the rights to legal claims.
9. To ensure the security of the Company’s premises, including recording images of visitors who contact us at our premises via closed-circuit television (CCTV).

Data retention period

We will retain your personal data for as long as is considered necessary for the purposes for which the data was collected, used or disclosed as set out in this Privacy Notice. The criteria used to determine our retention period include: we retain the personal data for the duration we have an ongoing relationship with you; and we may retain the personal data for a longer period as necessary to comply with applicable laws, or to be in accordance with legal prescription, or to establish, comply with or exercise the rights to legal claims or defend against the rights to legal claims, or to comply with, for any other cause, the Company’s internal policies and regulations.

Data disclosure

We may disclose your personal data in certain circumstances, for the purposes set out in this Privacy Notice, to:

1. Agencies, contractors/sub-contractors and/or service providers for the Company’s business operations.
2. Government authorities, supervisory authorities or other authorities as stipulated by laws, including competent officials.

International transfer of personal data

The Company does not have a policy to transmit or transfer your personal data to other countries.

Lawful basis for processing of personal data

We will process your personal data only to the extent necessary within the scope of this Privacy Notice under the following circumstances:

• Where we have obtained your consent, in cases where consent is required by law;

• To take steps at your request prior to entering into a contract or to perform contractual obligations between you and the Company;

• When it is necessary for the legitimate interests of the Company or any other persons or juristic persons, except where such interests are overridden by fundamental rights of your personal data;
• To comply with laws to which the Company is subjected;
• Where it is necessary for preventing or suppressing a danger to a person’s life, body or health (if any);
• To perform the Company’s duties for a task carried out in public interest or to perform duties for the exercising of official authority vested in the Company (if any).

In the case where the Company processes your sensitive personal data, the Company shall strictly comply with the law.

If the personal data collected by the Company is necessary for compliance with applicable laws or the performance of a contract, and you do not provide the required personal data, the Company may be subject to legal liabilities and/or unable to provide products and services to you, and may not be able to facilitate your requests.

Your rights as a data subject

According to the PDPA, you have the rights to take the following actions:

• The right to access your personal data.
• The right to request the correction of your personal data to ensure it is accurate.
• The right to request that your personal data be sent or transferred to another data controller.
• The right to object to the collection, use, or disclosure of your personal data.
• The right to request the erasure or destruction of your personal data, unless the Company is required to retain it by applicable law.
• The right to restrict the processing of your personal data. 
• The right to withdraw consent.
• The right to file a complaint with a competent authority under the PDPA.

Security measures for personal data protection

The Company implements appropriate and strict security measures for preventing unauthorized or unlawful loss, access to, use, alteration, correction or disclosure of personal data.

In the case where the Company assigns any third party to process your personal data pursuant to the instructions given by or on behalf of the Company, the Company shall appropriately supervise such third party to ensure protection of your personal data in accordance with the PDPA.

Contact information

If you have any questions or inquiries about the protection of your personal data, the collection, use or disclosure of your personal data, or the exercise of your rights, or if you have any complaints, you can contact the Company using the following channels:

Chanya Group Co., Ltd. (Better Me Clinic)
Address: 1312, 1314, 1316, 1318 Sutthisarn Winitchai Road, Din Daeng District, Bangkok
Tel: 02-059-8118, 088-603-2641
E-mail: bettermeclinic@gmail.com