Privacy Policy

Introduction

Gracewood is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect information about residents, their families, and website visitors. We operate in accordance with Thailand's Personal Data Protection Act (PDPA) and international data protection standards.

By using our services or website, you agree to the practices described in this policy. If you have questions or concerns about how we handle your information, please contact us at [email protected].

Information We Collect

Personal Information

When you inquire about services, enroll a resident, or visit our facility, we may collect:

• Name, age, and contact details (phone number, email address, mailing address)
• Family member or emergency contact information
• Health information necessary for care planning (dietary needs, mobility considerations)
• Preferences regarding daily routines, activities, and cultural observances
• Financial information for billing purposes

Website Usage Information

When you visit our website, we automatically collect:

• Browser type and version
• Device information and IP address
• Pages visited and time spent on pages
• Referring website or search terms
• Cookie data (see our Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on:

• Consent: You have given clear permission for processing
• Contract: Processing is necessary to fulfill our service agreement
• Legitimate Interest: Processing is necessary for our legitimate business operations
• Legal Obligation: Processing is required by Thai or international law

How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Providing residential care, companionship, and activity programs tailored to individual needs
• Communication: Sending weekly updates to families, responding to inquiries, and scheduling tours
• Safety and Well-being: Coordinating with healthcare professionals, emergency contacts, and ensuring proper care protocols
• Billing and Administration: Processing payments, maintaining resident records, and managing facility operations
• Improvement: Analyzing feedback to enhance services and develop new programs
• Marketing: Sending information about services and programs (only with your consent)
• Legal Compliance: Meeting regulatory requirements and responding to legal requests

Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Healthcare Providers: Doctors, nurses, and therapists involved in resident care (with consent)
• Service Providers: Third-party companies assisting with billing, data storage, or facility operations (under strict confidentiality agreements)
• Family Members: Designated emergency contacts and family members as specified by residents
• Legal Authorities: Government agencies when required by law or to protect safety
• Business Transfers: In the event of a merger or sale (with notice to affected parties)

Data Protection and Security

We implement appropriate technical and organizational measures to protect your information:

• Encrypted data transmission for online forms and communications
• Secure storage systems with access controls and regular backups
• Staff training on privacy practices and confidentiality obligations
• Regular security assessments and updates to protection measures
• Physical security measures at our facility including locked filing cabinets and restricted access areas

While we strive to protect your information, no system is completely secure. We will notify affected individuals promptly in the event of a data breach as required by law.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods:

• Resident Records: Maintained for seven years after service completion
• Financial Records: Retained for ten years as required by Thai accounting laws
• Inquiry Forms: Deleted after two years if no service engagement occurs
• Website Analytics: Aggregated data retained indefinitely; individual visit data purged after 26 months

Your Rights

Under Thai data protection law, you have the following rights:

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyze site traffic. For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to external sites not operated by Gracewood. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.

Children's Privacy

Our services are designed for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18 without parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

International Data Transfers

Your information is primarily stored and processed in Thailand. If we transfer data to countries outside Thailand, we ensure appropriate safeguards are in place in accordance with Thai data protection requirements. Families located outside Thailand who receive updates about their loved ones consent to this international data transfer.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when changes were made. Significant changes will be communicated via email to current residents and families or posted prominently on our website. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact:

If you have a complaint about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the Thai Personal Data Protection Committee.