Ganesha Health Service Co., Ltd. is committed to conducting its business ethically and in full compliance with the law. The company recognises the importance of protecting the personal data of individuals who contact and/or engage in transactions with us, including clients, contracting parties, business partners, contractors, service providers, job applicants, and employees (“you”). Therefore, the company has established and implemented this Privacy Policy (“Policy”) to outline our practices and procedures regarding the management of your personal data, such as collection, use, and disclosure. This includes our high standards and rigorous operational procedures to secure your personal data against unauthorised access, use, alteration, or disclosure, and to uphold your rights under the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

The company advises that you read this Policy thoroughly before providing your personal data for any of the purposes specified herein, ensuring you fully understand our personal data protection policy, as well as your rights and protections under the PDPA, as detailed below:

Clause 1: Your Personal Data Rights

1. You have the right to withdraw your consent at any time for the purposes for which you previously consented to the company collecting, using, or disclosing your personal data.

2. You may request access to, or obtain a copy of, your personal data, or request the disclosure of the acquisition of such data. The company may refuse your request where permitted by law or pursuant to a court order.

3. You have the right to receive the data provided to the company in an electronic format and the right to transfer your data for use in third-party services. In exercising this right, you may request the company to transmit the data directly to third parties where technically feasible.

4. You have the right to object to the collection, use, or disclosure of your data under the following circumstances:

4.1) Where the collection, use, or disclosure of personal data is for direct marketing purposes.

4.2) Where the collection, use, or disclosure of personal data is for scientific, historical, or statistical research purposes, unless necessary for the performance of a task carried out in the public interest by the company.

4.3) Where the data is collected out of necessity for the performance of a task carried out in the public interest, or for the legitimate interests pursued by the company, unless the company demonstrates compelling legitimate grounds that override your interests, or for the establishment, exercise, or defence of legal claims.

5. You may request the erasure, destruction, or anonymisation of your personal data, except where the retention of such data is required by relevant statutory obligations.

6. You may request the company to temporarily or permanently suspend the processing of all or part of your personal data.

7. You may request the rectification or modification of your personal data to ensure it is accurate, up to date, and not misleading.

8. You have the right to lodge a complaint with the competent supervisory authority if you believe that the collection, use, or disclosure of your personal data infringes or does not comply with the Personal Data Protection Act B.E. 2562 (PDPA).

Clause 2: Collection of Your Personal Data

We aim to provide information and services that meet your individual needs and expectations. We are therefore required to collect certain personal details when you register as a patient or member, or when entering into an agreement or transaction with us. The personal data we collect may include:

1. Full name
2. National identification number
3. Date of birth
4. Gender
5. Address and telephone number
6. Email address
7. Topics or content of interest

Should you enter into financial transactions with us, additional financial details will be collected, such as:
1.Credit card details
2.Bank account number

This also includes any other personal details strictly necessary for these purposes. All information provided must be accurate, complete, up to date, and not misleading. Collecting this data allows us to understand your requirements, tailor our services to distinguish your care from that of other patients, and ensure that the more information you provide, the better we can personalise our dental care to suit your needs.

Beyond initial registration, we may request additional personal details from you, such as when you participate in events, promotions, or activities organised by us or our business partners. You may be asked to provide further information, such as your preferred treatments or products, interests, and habits. Providing this supplementary information enables you to access a wider range of services and products, ensuring you do not miss out on exclusive benefits reserved for our registered patients.

Linking Personal Data with Social Media Tools

If you choose to use your social media account to register for our website, applications, or services, the clinic may access personal information that you have voluntarily provided to your social media account via that specific service provider, subject to their terms and privacy policies. The clinic will store and handle your personal data in accordance with our Privacy Policy.

The clinic will only collect your personal information with your explicit consent. Should you choose not to consent to the collection of your data, you may submit a request to withdraw your consent at any time. However, doing so may prevent us from providing certain services or tailoring your experience to your needs. This may also result in missing out on exclusive benefits, promotions, or specialized services provided by the clinic or our partners.

Clause 3: Purposes of Processing and Disclosure of Personal Data

The primary purpose of collecting your personal data is to ensure that each patient receives efficient, high-quality products and services from our clinic. By using our services, you agree and consent that the clinic may use your personal data to contact you or share all or part of your personal data with our affiliated entities or business partners via electronic marketing channels to maximise your benefits, without requiring prior notice.

Your personal data will be collected, stored, and retained appropriately. The clinic may utilise your personal data or disclose it to third parties, including related entities and business partners, for your benefit and for specific operational purposes, as outlined below:

1. To support the delivery of services, advertisements, products, privileges, and marketing activities tailored to your needs through the personal channels you have consented to provide to the practice.
2. To conduct research and analyse user experience across our website, applications, and social media platforms, ensuring a seamless experience tailored to your usage behaviour.
3. To personalise offers, advertisements, privileges, marketing campaigns, and content of interest to you, delivered via various channels of Thonglor Dental Hospital Co., Ltd., such as our website, email, on-site notifications, social media, or other future channels.
4. To process and fulfil your product orders placed through our platform, whether sold directly by the company or by affiliated partners.
5. To arrange and manage product deliveries made via the platform, whether handled directly by the company, third-party logistics providers, or affiliated partners.
6. To contact users for customer service, care, and support, or to deliver authorised marketing communications via the channels you have consented to provide.
7. To comply with applicable legal obligations and statutory requirements.
8. To protect the property rights, safety, and security of the company, its personnel, or other platform users.

The company may engage third-party service providers to assist in delivering its services. This may include storing or processing data within cloud-based systems located overseas. In such cases, these service providers have no independent authority to use personal data processed on the company’s behalf and are strictly bound by the provisions of this privacy policy.

This privacy policy does not cover the collection and use of personal data conducted independently by third parties. This applies to advertisers, service providers, or vendors on other websites linked to the company’s website, applications, social media platforms, or future communication channels, as well as the integration of social media features used to share content across our channels. Should any unlawful actions take place that cause damage to the company, the company accepts no liability for any losses or damages arising from the actions or data collection practices of these third parties.

Clause 4: Restrictions on the Use and/or Disclosure of Personal Data

1. The Company shall only use or disclose your personal data in accordance with your consent, and strictly for the purposes for which it was originally collected. The Company shall supervise its staff and personnel to ensure that your personal data is not used and/or disclosed beyond the specified purposes of data collection, nor disclosed to third parties, except where:

1.1) It complies with applicable laws, such as the Personal Data Protection Act, the Electronic Transactions Act, the Anti-Money Laundering Act, the Civil and Penal Codes, the Civil and Criminal Procedure Codes, etc.;

1.2) It is for the benefit of investigations conducted by inquiry officials or for court proceedings and adjudications;

1.3) It is in your vital interests and obtaining consent at that particular time is not feasible;

1.4) It is necessary for the legitimate interests pursued by the Company or by a natural person or legal entity other than the Company;

1.5) It is necessary to prevent or suppress a danger to a person’s life, body, or health;

1.6) It is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract;

1.7) It is necessary to achieve purposes relating to the preparation of historical documents or archives in the public interest, or for studies, research, or statistical purposes, provided that suitable safeguarding measures are in place.

2. The Company may engage information technology services provided by third-party service providers to store personal data. Such service providers must implement appropriate security measures and are strictly prohibited from collecting, using, or disclosing personal data beyond the scope instructed by the Company.

Clause 5: International Transfer of Your Personal Data

The clinic may disclose or transfer your personal data to third parties or servers located abroad, in destination countries that may or may not provide an equivalent standard of personal data protection. Nevertheless, we will take all necessary steps and measures to ensure that your personal data is transferred securely, that the recipient provides an adequate level of data protection, or that the transfer complies with other applicable legal requirements. Furthermore, we will obtain your consent for transferring your personal data abroad whenever required by law.

Clause 6: Cookies, Pixels, and IP Addresses

In addition to personal data, the clinic may collect certain information via technologies such as cookies, pixels, IP addresses, and local storage on users’ browsers and devices. This includes third-party collection tools, such as those from marketing or analytics service providers, which gather data directly through our website.

A cookie is a small text file that stores information on a user’s computer, mobile phone, or other device. Cookies enable the clinic to understand which services or dental treatments you prefer, as well as those you may not be interested in.

A pixel is a tiny graphic element embedded within web page code. It performs functions such as enabling external servers to measure website and application traffic, and is frequently used in conjunction with cookies. The embedded code tracks when a pixel is loaded to indicate whether a user has interacted with specific screens or parts of a page.

Through the operation of cookies and pixels, the clinic can recognise returning visitors to our website and applications, evaluate the volume and intent of visitors, and tailor relevant healthcare information. This technology also allows us to enhance your browsing experience, improve the quality of our clinical services, and provide bespoke dental care options, privileges, products, events, and advertisements aligned with your interests and online activity.

Which types of cookies does Ganesha Health Service Co., Ltd. use?

To provide you with the best possible browsing experience on www.theivorydental.com, we use the following types of cookies. None of these cookies can identify you personally.

• Strictly Necessary Cookies
  hese cookies are essential for the operation of www.theivorydental.com. They enable you to access all areas and content of our website securely.These cookies are deleted once you finish your browsing session. If you disable them, you may not be able to use certain features on our website as intended, such as reading content or navigating between pages.
• Performance and Analytics Cookies
  We use these cookies to collect statistical data on how visitors access and interact with www.theivorydental.com. This enables us to analyse traffic, count visitor numbers, and better understand browsing behaviour. Ultimately, this helps us improve website functionality and ensures you can easily find what you need.In addition, we may use these cookies to highlight articles or dental services that may be of interest to you, as well as to measure the effectiveness of our content and adverts based on your website usage.Please note that all information collected and processed is completely anonymous. It does not contain any personally identifiable details (such as names or email addresses) and is used strictly for aggregate statistical purposes.

Clause 7: Retention Period for Your Personal Data

The clinic will retain your personal data for as long as reasonably necessary to fulfil the purposes for which it was obtained, as well as to comply with legal and regulatory obligations. However, we may retain your personal data for a longer period where required by applicable law.

Clause 8: Security of Your Personal Data

The Company employs SSL (Secure Sockets Layer) or Secure Electronic Transaction (SET) security protocols to protect your personal data and privacy. These systems comply with international standards and are designed specifically to safeguard personal information.

Furthermore, we utilise a network firewall security system to ensure that access to Company data is strictly limited to authorised parties. The Company has established firewall layers between its computer network and the internet. In addition, antivirus and anti-malware software (Comodo Antivirus and Comodo Internet Security) is installed and routinely updated across all Company computers and servers.

Under these security measures, only you are permitted access to your personal data. You are solely responsible for maintaining the confidentiality of your personal details and passwords. The Company strongly advises that you do not disclose your password to anyone. You should always log off from your internet session or web browser whenever you finish using the computer, ensuring that third parties cannot access your personal data and correspondence, particularly when using shared or public computers.

To ensure the safety of your personal data and that of other service users, you agree not to commit any act that infringes upon personal privacy rights, the privacy rights of third parties, or the intellectual property rights of the Company, nor engage in any unlawful activity. This includes refraining from transmitting content, still images, animations, or any other data that is inappropriate, indecent, contentious, fraudulent, or promotes services or actions that violate the law or cause detriment to the Company.

In the event that your personal data or associated information, whether general or personal, is lost or damaged due to cyber espionage, hacking, or electronic theft through no fault of the Company, the Company reserves the right to disclaim any liability arising from such occurrences.

Clause 9: Changes to the Privacy Policy

The Company may amend or update this Privacy Policy at any time by publishing the amended version on the Company’s website. Your use of the Company’s website, applications, and other service channels constitutes your acceptance of the terms set out in this Privacy Policy. Your continued use of the services following the publication of any such amendments shall likewise constitute your acceptance of each respective change.

Clause 10: Contact Channels

If you require further information regarding service usage or the security of your personal data, you may complete the Data Subject Rights Request Form and email it to contact@theivorydental.com, or contact the Company at

Ganesha Health Care Service Co., Ltd.

67/16 Ratchadaphisek Road, Din Daeng Subdistrict, Din Daeng District, Bangkok 10400

Tel: 02-275-3599

Email: contact@theivorydental.com

Notice issued on 7 April 2021