Introduction
GoMedic – Thailand Ltd. (“We” or “GoMedic”) is committed to protecting your privacy. The following is our approach to your personal data, including collection, use, disclosure (collectively referred to as “processing”), and protection of personal data that you provide to us while visiting the website https://go-medic.com/ or using GoMedic’s application or receiving services from us. This Privacy Policy covers any information that can directly or indirectly identify you, whether received directly from you or forwarded by a third party (“Data” or “Personal Data”). For your health and personal data, in addition to complying with this Policy, we will comply with the provisions of laws, rules, announcements, orders, or regulations of relevant regulatory authorities or as amended. As the controller of your personal data, we have prepared this Privacy Policy, which is part of the Terms and Conditions for providing the website services, including your access to the services. Each time you use such services, it is deemed that you have read and agreed to accept this Privacy Policy.
Collection of personal data
We collect your personal data only when necessary in cases where you have directly consented to provide us with your information, whether by providing information to request services from us through our website or other channels, such as making an appointment with a doctor, registering online, subscribing to our newsletter, or conducting offline transactions, such as registering patients at clinic or hospital registration counters, including our distributors or service providers, or government agencies in cases where you have given your consent to disclose such information, or disclosure as required by law.
Personal information we collect
The types of personal data we collect will depend on the purposes for which we process the data in accordance with this Privacy Policy, whether it is personal data we collect directly from you or from third parties, as follows:
- Identifying information such as name, photograph, gender, date of birth, passport, national ID card number, or other personally identifiable number.
- Information about education, training, and employment, such as education and training history, qualification certificates or transcripts, grades or grade levels, education level, language skills, professional license information, etc.
- Contact information such as address, phone number, email, and other social media.
- Contractual information and contractual companies
- Service access information, such as medical appointment information, relatives’ personal information, room requests, and other additional services.
- Information for subscribing to news and participating in marketing activities, such as registering to attend seminars, registering to receive promotions
- Statistical data such as patient numbers and website visits
- Information from your visits to our website, such as IP Address, Cookies, online doctor appointments
- Health information, reports on your physical and mental health, your health care, laboratory test results, and diagnoses.
- Information related to your medication use and drug allergies
- Feedback information and treatment results you provided
- Other information such as cameras recording temperature and/or sound through closed-circuit television (CCTV) cameras, photographs, video and audio recordings, and audio recordings of conversations.
- We will not collect or use any of your sensitive information, such as the following: religious beliefs, criminal history, unless required by law or regulation or with your consent.
Purpose of processing personal data
We may process your information based on your consent, or in accordance with a contract between us, or otherwise for our legitimate interests for the following purposes:
- The objectives of providing medical services include:
- Provide or deliver our Services and your access to the Services, whether online or offline.
- Make an appointment with a doctor, send news, recommend clinic or hospital services
- Coordinating and forwarding information to network clinic or hospitals and other medical facilities to help speed up patient referrals.
- Patient identity verification
- Send a text message to remind you of a doctor’s appointment or offer us help.
- Other purposes that support the implementation of the above purposes or as consented by you from time to time.
- Purpose for legitimate benefit
- Recording images of people who come to contact or receive services from the clinic or hospital on the CCTV system, including exchanging cards before entering the building, for security within the clinic or hospital area.
- Risk management/audit/internal management including forwarding to affiliated companies under the Group’s Personal Data Protection Policy (Binding Corporate Rules)
- Comply with any law, regulation, rule, regulation or request from any government agency, such as complying with a subpoena or court order or other lawful request.
- Our marketing purposes, for which we will only process for these purposes where you have given us your consent to the processing, are:
- Facilitate and offer a variety of benefits
- Marketing, promotional and customer relations purposes, such as sending information about promotions, products and services, sales promotions and business partners.
- Conduct customer satisfaction surveys, market research, and statistical analysis to provide information for improving products and services or creating new products and services.
- To be a channel for communication, answering questions or responding to complaints related to the use of our services, such as problems in using the services or any losses.
Disclosure of Personal Information
We may disclose or transfer your personal data to third parties, which may be located within or outside Thailand, which are countries that have adequate personal data protection standards and comply with the personal data protection criteria set out by law, and we will take necessary and appropriate measures or in accordance with laws and regulations for the purposes specified above, to the following persons:
- Network clinics or hospitals, network companies, partner businesses, and affiliate businesses
- Agents, service providers, or partners who provide services to us or act on our behalf, such as laboratory testing service providers, X-ray centers, and information technology services.
- Business partners, such as insurance companies, partners participating in loyalty and privilege programs, and other companies involved in providing services to you or fulfilling the above purposes.
- Banks and payment service providers, such as credit or debit card companies.
- Security and safety officials or agencies
- Immigration and Customs Department
- Government agencies, regulatory agencies, and other agencies as permitted or required by law.
Links to third-party websites
Our website may contain links to third-party websites. If you follow these links, this Privacy Policy does not cover those third-party websites. Therefore, the processing of your personal data by these third parties is beyond our control and please note that we have no involvement and liability for the actions of such third parties.
Personal Data Protection and Security
Your personal data will be retained for as long as necessary for the purposes described in this Privacy Policy or as required by law or for legal proceedings. After such period, if you do not consent to our continued processing of your personal data, we will destroy your personal data in accordance with our data destruction procedures and will do so without delay. We will use appropriate technical and managerial measures to protect and maintain the security of your personal data we collect, in accordance with the NIST Cybersecurity Framework, in our information security controls to prevent unauthorized access, alteration, use, and disclosure of your personal data. We will also restrict access to your data, whether stored electronically or in hard copy, to only those personnel who need to process it and store it in a secure location with restricted access for hard copy data.
Rights regarding personal data owners
You may contact us/the Data Protection Officer/the relevant authority to submit a request to exercise your rights as follows:
- You have the right to access the data we hold about you, including to request a copy of your data and to request that you transfer the personal data you have provided to us to another data controller or yourself.
- You have the right to object or suspend the collection, use or disclosure of your information.
- You have the right to request that we correct inaccurate or supplement incomplete data, and may request that we delete, destroy or disclose the source of your data where your consent was not provided.
- If you find that we or our personnel are using or disclosing your information in a manner that is not in accordance with your consent or is not in accordance with your legal rights, you have the right to lodge a complaint with the Personal Data Protection Commission.
- You have the right to withdraw your consent to the processing of your personal data, where you have given us consent, at any time for the period that your personal data is with us, unless your right to withdraw consent is restricted by law or a contract that benefits you.
- However, if you withdraw your consent to the processing of any personal data, it may result in us not having enough data to process it to achieve the stated purposes and you may not be able to receive our services conveniently.
Privacy Policy Changes
We may review and change this Privacy Policy from time to time to reflect changes in our services and operations, your feedback and comments, and applicable laws. The most recent version will be posted on our website so you are aware of how we are protecting your personal information.
Contact Us Channels
If you would like to contact us or have any questions or would like to ask for more information about the collection, use or disclosure of personal data, the exercise of data owner rights or the withdrawal of consent, or have any complaints, you can contact the company through the following channels:
GoMedic – Thailand Ltd.
Contact Address: 591, United Business Center II Building, 20th Floor, Sukhumvit Road, North Klongton, Wattana Bankgkok 10110 +66 3301 9211 [email protected]
Data Protection Officer (DPO)
Email: [email protected]
The information that must be informed to us includes:
- Name, Surname, National ID Card Number / Passport Number
- The matter you want to inquire about is the details of the error that occurred.
- Your telephone number and contact address, including your email address.