Privacy Policy
1. Introduction & Commitment to Privacy
ACare Sungreen (“we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us. We respect your privacy and take reasonable measures to ensure that personal information is collected, used, stored, disclosed, and managed responsibly. This Privacy Policy explains how we handle personal information when you use our website, contact us, make an enquiry or booking, use our medical and wellness services, or otherwise interact with us.
2. Personal Information We Collect
We may collect personal information that is reasonably necessary to provide our medical, surgical, wellness, consultation, booking, and related services and to operate our business effectively. The information we collect may include your name, address, telephone number, email address, date of birth, gender, identification information, appointment and booking details, medical history, clinical notes, treatment information, diagnostic information, payment and billing details, insurance information, transaction records, and other information that you voluntarily provide to us in connection with our services. Health and medical information is treated as sensitive and confidential information and is handled with additional care.
When you interact with our website, online forms, booking systems, or other digital services, we may also collect technical and usage information such as your IP address, browser type, device information, pages visited, time spent on the website, referral sources, and information relating to your interaction with our website. We may use cookies, analytics tools, and similar technologies for website functionality, security, performance analysis, and improving your experience.
3. How We Collect Personal Information
We may collect personal information directly from you when you provide it to us in person, through our website, online forms, booking platforms, telephone calls, emails, social media, digital communications, consultations, or other interactions with our services. Where reasonably necessary and permitted, we may also receive information from third parties involved in your care or services, such as referring practitioners, hospitals, medical providers, insurers, or other relevant organisations. We may also receive information contained in medical records, reports, referrals, or other documents relevant to your treatment or care.
We aim to collect personal information through lawful, fair, and reasonable means and will not intentionally collect information in an unnecessarily intrusive manner.
4. Website, Cookies and Digital Information
Our website may use cookies and similar technologies to support website functionality, remember preferences, maintain security, analyse website performance, and improve user experience. Certain cookies may allow information such as your name, email address, or website details to be remembered when you voluntarily provide such information through website features, such as comments or forms, so that you do not need to enter the same information repeatedly.
If you visit a login page or use an account-related function on our website, temporary or persistent cookies may be used to determine whether your browser accepts cookies, maintain login sessions, remember display preferences, and provide account functionality. Certain cookies may remain active for a specified period depending on their purpose, while others may be removed when you close your browser or log out.
You may manage or disable cookies through your browser settings, although doing so may affect the functionality or availability of certain features on our website.
5. Comments and User-Submitted Content
If you leave a comment or submit other information through our website, we may collect the information that you provide together with technical information such as your IP address and browser user-agent information. This information may be used to manage comments, prevent spam, maintain website security, and administer the website.
An anonymised or hashed version of your email address may be processed by third-party services where necessary to determine whether an associated profile or avatar service is available. Where a comment is approved for publication, information contained within the comment and any associated profile image may be visible publicly in connection with that comment.
Comments and associated information may be retained for as long as reasonably necessary for website administration, moderation, security, spam prevention, record-keeping, or other legitimate business purposes.
6. Media and Uploaded Content
If you upload images or other media to our website, you should avoid including unnecessary personal information or embedded location information, such as GPS or EXIF data, unless you are comfortable with that information potentially being accessible to others. Information embedded within publicly accessible images or files may potentially be downloaded or extracted by visitors.
7. Embedded Content and Third-Party Services
Our website may contain embedded content from other websites or services, including videos, images, articles, booking systems, social media content, analytics services, or other third-party features. Embedded content may operate in a similar manner to visiting the relevant third-party website directly.
These third parties may collect information about your interaction with their content, use cookies or similar technologies, and process information according to their own privacy policies. We are not responsible for the privacy practices of third-party websites or services that we do not control, and we recommend reviewing their respective privacy policies before providing personal information to them.
8. How We Use Personal Information
We may use personal information to provide medical, surgical, wellness, consultation, and related services; arrange and manage appointments and bookings; assess and manage treatment and care; communicate with you about appointments, consultations, treatments, services, programs, and relevant updates; respond to enquiries and requests; process payments, billing, and insurance matters; maintain medical and administrative records; operate and improve our website and digital services; prevent fraud, spam, misuse, or security incidents; manage our business operations; and comply with applicable legal, regulatory, professional, or operational requirements.
We will generally use personal information only for purposes connected with the services we provide, our business operations, or purposes that are reasonably related to the circumstances in which the information was provided. Where consent is required or appropriate, we may request your consent before using your information for a particular purpose.
9. Sharing and Disclosure of Personal Information
We may share personal information where reasonably necessary to provide our services or operate our business. This may include sharing information with doctors, surgeons, nurses, medical practitioners, hospitals, referring practitioners, insurers, payment providers, booking platforms, IT providers, administrative service providers, professional advisers, and other service providers who assist us in delivering or managing our services.
Where we use third-party service providers to process or handle personal information on our behalf, we take reasonable steps to ensure that such information is handled securely and confidentially and is used only for appropriate purposes.
We do not sell personal information to third parties. We will not intentionally disclose personal information for unrelated purposes unless you have given permission, the disclosure is reasonably necessary for the services being provided, or disclosure is otherwise permitted or required by applicable requirements.
10. Overseas Disclosure and International Services
Because some of our medical and related services may involve providers, hospitals, clinics, or other organisations located outside your country of residence, personal and health information may need to be shared internationally where reasonably necessary for consultation, medical treatment, surgical procedures, clinical care, continuity of care, administrative arrangements, or related services.
This may include the transfer or disclosure of information to medical providers, hospitals, clinics, or related organisations located in Thailand. Where information is transferred internationally, we take reasonable steps to use appropriate security measures and confidentiality arrangements to protect the information.
By using our services, you acknowledge that certain personal or health information may need to be shared with relevant overseas medical or service providers where this is reasonably necessary to arrange or provide the requested services.
11. Payment and Transaction Information
Where you make a payment or purchase a service, we may collect and process information necessary to complete and record the transaction, including billing information, payment details, insurance information, transaction records, and other information required for administrative purposes. Payment information may be processed through third-party payment providers, banks, financial institutions, or other service providers involved in completing the transaction.
We do not intentionally retain payment card information longer than reasonably necessary for the relevant transaction or legitimate administrative and record-keeping purposes, subject to the practices of the payment provider involved.
12. Account Information and Password Resets
Where our website allows users to register for an account, we may store the personal information provided in the user’s account profile in order to provide account-related functionality and administer the website. Users may contact us to request access to, correction of, or deletion of personal information associated with their account, subject to information that we are required or permitted to retain.
If you request a password reset, technical information such as your IP address may be included in or processed in connection with the password-reset process for security and account-protection purposes.
13. How We Protect Personal Information
We take reasonable administrative, technical, and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration, disclosure, or destruction. Depending on the circumstances, these measures may include secure electronic systems, encrypted connections or storage where appropriate, access controls, restricted permissions, confidentiality obligations, staff training, secure physical records, and procedures for identifying and responding to privacy or security incidents.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. While we take reasonable precautions to protect your information, we cannot guarantee absolute security against every possible security incident.
14. Retention of Personal Information
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing medical and related services, maintaining appropriate clinical and administrative records, managing accounts and transactions, resolving disputes, maintaining website functionality, preventing misuse, and meeting applicable record-keeping requirements.
When personal information is no longer reasonably required, we may securely delete, destroy, anonymise, or de-identify the information, subject to any legitimate requirement to retain it.
15. Access, Correction and Deletion
You may contact us to request access to personal information that we hold about you and, where appropriate, request that inaccurate, incomplete, outdated, or misleading information be corrected. You may also request deletion of personal information that we hold about you where deletion is reasonably possible.
Certain information may need to be retained for medical, clinical, administrative, security, financial, legal, or other legitimate purposes. In such circumstances, we may be unable to delete particular information, but we will continue to handle it with appropriate confidentiality and security.
Where our website provides functionality allowing users to view, edit, or delete certain information directly through their account, those functions may be available subject to the website’s technical capabilities and applicable retention requirements.
16. Withdrawal of Consent
Where we rely on your consent to collect, use, or disclose personal or sensitive information, you may withdraw your consent by contacting us. Withdrawal of consent may affect our ability to provide certain services, treatments, bookings, communications, or ongoing care where the relevant information is necessary for those purposes.
Withdrawal of consent will not necessarily affect information that has already been collected or used before the withdrawal, or information that we reasonably need to retain for legitimate purposes.
17. Privacy and Data Security Incidents
We maintain procedures for identifying, assessing, managing, and responding to privacy and data security incidents. If we become aware of a security incident involving personal information, we will take reasonable steps to investigate the incident, contain the issue, reduce potential harm, and take any further action that may be appropriate based on the circumstances.
Where appropriate, we may contact affected individuals or relevant authorities regarding a significant privacy or security incident.
18. Privacy Enquiries and Complaints
If you have questions, concerns, or complaints about how we collect, use, store, or disclose your personal information, you may contact us using the contact details provided on our website. We will make reasonable efforts to review and respond to privacy-related enquiries and complaints fairly and within a reasonable timeframe.
19. Privacy Practices and Ongoing Review
We maintain internal practices, procedures, and systems designed to support the responsible handling of personal information. These practices may include staff confidentiality requirements, privacy and security training, access controls, secure information-handling procedures, incident-response procedures, appropriate retention and destruction practices, and periodic reviews of our privacy and information-security practices.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, technology, information-handling practices, or operational requirements. Any updated version will be published on our website, and the latest version will apply from the date it is published unless otherwise stated.
21. Contact Us
If you have any questions about this Privacy Policy, wish to request access to or correction of your personal information, wish to request deletion of information, wish to withdraw consent, or wish to make a privacy-related enquiry or complaint, please contact us using the contact details provided on our website.