Privacy Policy
Synphaet Hospital Group
About the Policy
Synphaet Hospital Group includes Synphaet Co., Ltd., Synphaet Seriruk Co., Ltd., Synphaet Theparak Co., Ltd., Synphaet Lamlukka Co., Ltd., Synphaet Bangna Co., Ltd., Synphaet Kanchanaburi Co., Ltd., and Synphaet Nakhonpathom Co., Ltd. (collectively referred to as “Synphaet“). The group operates hospitals under the Synphaet Hospital name, offering various medical services (“Services“).
Synphaet is committed to conducting business with good governance principles, prioritizing data privacy and security. This Privacy Policy (“Policy”) ensures that Synphaet processes personal data transparently and securely, in compliance with legal and international standards.
If you are a patient or visitor at our hospital, you can learn more about how we process your personal data in the Privacy Notice for Patients available on our website.
1. Collection of Your Personal Data
Synphaet may collect personal data directly or indirectly through various channels, including:
- Information you provide directly when registering as a patient or using Synphaet services.
- Information from family members, representatives, or authorized individuals.
- Data from affiliated companies within the Synphaet Group.
- Information received from your employer.
- Records from other medical institutions you authorize.
- Public sources, social media, and business partners.
2. Types of Personal Data Collected
Synphaet collects various types of personal data, including:
- Personal Identification: Name, date of birth, national ID/passport number, contact details, photos, and medical record numbers.
- Financial Information: Payment details, insurance records, and transaction history.
- Health Data: Medical history, allergies, diagnoses, and treatment records.
- Usage Data: Website activity, IP addresses, and device information.
3. Data Retention
Synphaet retains personal data as long as necessary for service provision. The maximum retention period is 10 years unless required by law.
4. Purpose of Data Use and Disclosure
- Providing medical services and patient management.
- Ensuring security and compliance with legal regulations.
- Conducting research and service improvement.
- Marketing and communication, subject to user consent.
5. Data Security
Synphaet adheres to international security standards (JCI certification) to protect personal data from unauthorized access or breaches.
6. Your Rights
Under data protection laws, you have the right to:
- Access and request a copy of your personal data.
- Correct inaccurate data.
- Request data deletion under specific conditions.
- Object to data processing.
If you wish to exercise your rights, please contact our Data Protection Officer at [email protected].
Effective Date: April 10, 2023
