HEALTHLAB HEALTHCHAIN CO.,LTD. (hereinafter referred to as “the Company”) recognize the importance of protecting your personal data and are committed to complying with the Personal Data Protection Act B.E. 2562 (2019). This Privacy Policy (“Policy”) is intended to inform you of how the Company collects, uses, and discloses your personal data, as well as your rights concerning your personal data.

Personal Data We Collect

“Personal Data” means any information relating to an identified or identifiable natural person.

The Company may collect the following personal data from you:

1. Personal Information: Name, surname, HN (Hospital Number), LN (Lab Number), age, date of birth, identification card number, passport number, signature, copies of identification card and passport, marital status, job title, occupation, education, shareholder registration number, or other official documents that can identify you.
2. Contact Information: Address, telephone number, email, business card, LINE ID, social media accounts.
3. Image Data: Still images and video footage from CCTV cameras.
4. Financial Information: Bank account information, copy of bankbook, credit card number, purchase history.
5. Data from Automated Systems: IP address, cookies, service usage behavior, service usage history, voice, photos, videos, social media account names, chats, geolocation.
6. Sensitive Personal Data: Biometric data, genetic data, race, religion, health information. The Company will collect, use, and disclose this data only with your explicit consent or as permitted by law.

 

Sources of Personal Data

The Company collects your personal data from various sources:

1. Directly from you: Through the Company’s website, applications, or other channels, when entering or exiting the Company’s premises, purchasing products or services, responding to questionnaires, communicating, or applying for jobs.
2. From third parties: Such as relatives, family members, partner organizations, government agencies, or affiliated companies.
3. From automated systems: Such as images from CCTV cameras.
4. From other sources: Such as public information.

 

Purposes of Processing Personal Data

The Company processes your personal data for the following purposes:

1. Providing medical laboratory services.
2. Creating and maintaining your service records.
3. Making appointments, sending notifications, coordinating with you and doctors, and providing health advice.
4. Coordinating and transferring information to affiliated clinics and relevant external agencies.
5. Conducting accounting and financial activities.
6. Pursuing the Company’s legitimate interests, such as recording complaints or CCTV footage.
7. Complying with laws, regulations, or legal obligations.
8. Verifying the identity of service users.
9. Evaluating and improving business operations.
10. Responding to your requests.
11. Other purposes with your explicit consent.

 

Disclosure of Personal Data

The Company will not disclose your personal data to third parties unless we have your consent or as required by law, such as disclosure to business partners, affiliates, agents, service providers, government agencies, or affiliated companies. The Company will take appropriate measures to protect your personal data.

Transfer of Personal Data to Other Countries

The Company may transfer your personal data to other countries for service purposes, such as specialized testing or cloud storage. The Company will comply with applicable laws and international standards to protect your personal data.

Protection of Personal Data

The company is committed to operating in accordance with international standards in maintaining appropriate security of personal data, including limiting access to personal data to only authorized individuals.

Data Retention Period

The Company will retain your personal data for the period required by law or as necessary for the purposes of processing.

Your Rights as a Data Subject

You have the following rights under the law:

1. The right to withdraw consent.
2. The right to access and obtain a copy of your personal data.
3. The right to rectification of your personal data.
4. The right to erasure or destruction of your personal data.
5. The right to data portability.
6. The right to object to the processing of your personal data.
7. The right to restrict processing of your personal data.
8. The right to lodge a complaint with the Personal Data Protection Committee.
    

 

Contacting the Company

If you have any questions or wish to exercise your rights, please contact the Company at:

HEALTHLAB HEALTHCHAIN CO.,LTD.

Changes to this Privacy Policy

The Company may amend this Privacy Policy. Any changes will be posted on the Company’s website. You should review this Policy regularly.