Drip Lab Phuket Privacy Policy

1. Roles and scope

The treating clinic provides treatment, receives booking deposits and keeps medical records. Booking and enquiry support may receive contact, appointment and location information to coordinate a visit. Information is not necessarily accessible only to clinic employees. Medical information should be limited to people who need it for assessment, treatment and related lawful purposes.

This notice covers website visitors, people enquiring or booking, patients and authorised representatives. It does not replace clinical informed consent. Agreeing to treatment or paying a deposit is not consent to advertising or publication of a testimonial.

2. Enquiries and booking information

Enquiries and bookings may involve your name, telephone or WhatsApp contact, requested service, appointment arrangements, hotel or home address, map pin, access instructions, booking correspondence and payment status. Only information relevant to arranging the visit should be requested.

Do not send complete card details, passwords, unrelated identity documents or another person's medical records in an ordinary enquiry. Ask why any requested document is necessary and how to provide it safely.

3. Clinical information

The clinical provider may need symptoms, relevant medical history, medicines, allergies, pregnancy or breastfeeding information, clinical observations and records of treatment or reactions to assess suitability and provide care. The treating clinic holds these medical records.

The treating professional should explain what is required, the purpose and applicable basis, and the consequences if essential information is unavailable. Where explicit consent is required, it must be specific; accepting a general website notice is not a substitute. Any healthcare or emergency exception must meet the applicable legal conditions.

Clinical photographs or records used for treatment planning, specialist consultation or emergency transfer do not thereby become authorised advertising material.

4. Purposes and legal bases

Ordinary contact and appointment information is used to respond to your enquiry, take steps you request before booking, coordinate access and administer the agreed service. Payment information is used for reconciliation, receipts and applicable accounting obligations.

Clinical information is handled for assessment, treatment, appropriate follow-up and applicable professional or legal obligations, under a valid sensitive-data basis. A booking contract alone does not authorise every use of health information.

Relevant information may also be needed for a specific complaint, safety incident, lawful request or claim. Any essential website security processing must be proportionate. Optional analytics or advertising requires the relevant choice and must also meet platform and legal restrictions; consent does not make otherwise prohibited health-data sharing permissible.

5. Required and optional information

A working contact method and accurate appointment/location details are needed to coordinate a mobile visit. A clinician may need additional information for safe assessment. The collection process should explain which details are required and what happens if you decline.

Optional marketing permission is separate from booking and clinical care. Drip Lab Phuket does not currently send promotional messages. Your enquiry or treatment does not enrol you in a promotional list.

6. Representatives and referral enquiries

A hotel concierge, companion or other representative may help arrange a visit. They should provide only information they are entitled to share. Providing your number does not automatically entitle them to receive your diagnosis, treatment or payment details.

Tell booking support who is authorised to help with access. The patient's clinical decision-making and consent remain separate from administrative arrangements.

7. Access and recipients

Information may be needed by booking/enquiry support, the assigned treating professionals and the clinical provider, and providers supporting messaging, payments, hosting and business records. Relevant disclosures to advisers, emergency services or authorities must have an appropriate purpose and lawful basis.

Location instructions should be limited to what is needed for the visit. Hotel reception does not need a diagnosis simply to help locate a room. No claim is made that all systems, suppliers or storage locations are operated directly by the clinic.

8. WhatsApp, telephone and payment links

The published WhatsApp and telephone contact is +66 84 351 3541. The business receives the information you send through that channel; linked business devices or authorised support may have access. WhatsApp processes information under its own Privacy Policy. Encryption in transit does not determine access after messages reach business devices.

Booking payments use a Stripe payment link supplied after arrangements are agreed. The clinic receives the THB 1,000 booking deposit. Stripe processes payment information under its Privacy Policy. Transaction details may be needed to identify and reconcile a payment. Do not send full card numbers or security codes in WhatsApp or email.

9. Cookies, analytics and embedded media

Use Cookie settings to accept, reject or change optional categories. Optional analytics and advertising measurement may be used only with the relevant choice and subject to applicable restrictions. Saving a preference does not authorise unrelated use of your information.

Analytics, advertising or embedded media providers may process browser or device information when their services are enabled. Google's Privacy Policy and Vimeo's privacy information explain their practices. Loading an embedded player can contact its provider before playback. Video playback and advertising measurement are separate uses.

Treatment choices, symptoms, message contents, medical records and health-revealing URL or referrer information must not be sent to advertising platforms. A generic event name or a cookie preference does not authorise disclosure of health information.

10. Reviews, photographs and testimonials

Permission has been confirmed for the supplied customer images and testimonials used on the website. Publication permission must remain separate from clinical consent and limited to its agreed use. Contact the privacy address with questions about your material or a withdrawal request.

A public review is not blanket permission for every subsequent advertising use. Clinical photographs collected for care do not become marketing photographs automatically.

11. Overseas processing and safeguards

Messaging, payment, hosting and media providers can involve storage or access outside Thailand. The responsible organisations must establish the applicable transfer arrangements and safeguards for the actual services used. Acceptance of this notice is not blanket consent to unspecified overseas transfers.

Ask the privacy contact for details of the providers and transfer arrangements relevant to your information. This notice does not grant permission for unrestricted overseas disclosure.

12. Retention, security and deletion

Retention depends on the record and its purpose: enquiries and booking coordination, clinical care and professional obligations, payment and accounting requirements, or a specific complaint or legal claim. Information should not be kept longer than needed for those purposes and applicable obligations. Contact the privacy address for the period or criteria relevant to your records. Medical and accounting records may need to remain after an appointment ends. Deletion requests are considered separately from any lawful obligation to retain a record, including restricted recovery copies or material subject to a legal hold.

A deletion request does not necessarily require removal of records that must lawfully be retained. Any continued retention should have a specific reason and does not authorise unrelated marketing. Please report suspected disclosure, lost records or account compromise through the contact above.

13. Your rights and requests

Subject to applicable conditions and exceptions, you may request access and copies, source information for indirectly collected data, correction, deletion, restriction or portability; object to relevant processing; or withdraw consent where consent is the basis. You may also complain to the competent Thai data-protection authority.

Contact info@driplabphuket.com or +66 84 351 3541. Proportionate identity checks may be needed to protect your information and other people's rights. Ask for the appropriate verification method before sending identity documents. If a request cannot be met in full, the applicable reason and next steps should be explained.

Withdrawal does not make earlier lawful processing unlawful or remove a separate obligation to retain particular records. Privacy rights are not waived by booking or paying a deposit.

14. Age, changes and contact

The service is for adults 18 and over; under-18s are not accepted. A person booking for another adult does not automatically have authority to provide clinical consent or disclose their health information.

Material changes to this notice will be identified where required. A new notice cannot retrospectively authorise an unrelated use or replace consent that must be obtained separately.

Contact: Drip Lab Phuket, info@driplabphuket.com, +66 84 351 3541.