Privacy Policy

1. Who we are

[ENTITY_NAME], operating Bangkok Botox Clinic. Contact: [CONTACT_EMAIL].

2. Data we process

• (a) Publicly available business information and public reviews — aggregated from public sources (Google Maps). This may include reviewer display names as they appear publicly.
• (b) Visitor data — analytics (aggregate page-view counts via Vercel Analytics), device and usage data, and minimal first-party cookies for site preferences.
• (c) Data you submit — name, email, phone number, and message content when you use booking or contact forms. Also correction requests and correspondence.

3. Purpose & lawful basis

We operate an information directory in the legitimate interest of public access to information. We process contact form data to forward enquiries to clinics as you request. We seek consent for any non-essential cookies or marketing communications.

4. Cookies

We use minimal first-party cookies for session authentication (admin only) and site preferences. Vercel Analytics is used for aggregate traffic measurement only — it does not identify individual visitors or track behaviour across sites. We do not run cross-site advertising trackers.

5. Sharing

We do not sell or rent personal data. When you submit a booking enquiry, your contact details are forwarded to the clinic you selected and to our admin for follow-up. Infrastructure service providers (Vercel for hosting, Upstash for session storage) process data on our behalf under data processing agreements.

6. Retention

Form submission data is retained for up to 18 months for follow-up and dispute resolution, then deleted. Aggregate analytics data is retained indefinitely as it contains no personal data.

7. Your rights (PDPA)

Under applicable law (including Thailand's PDPA where relevant), you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten").
• Object to processing based on legitimate interest.
• Withdraw consent at any time.
• Lodge a complaint with the relevant supervisory authority.

To exercise these rights, email [CONTACT_EMAIL] with your name and the email address you used. We respond within 7 business days.

8. Reviewer & business data requests

If you appear in aggregated content on this site (as a reviewer display name or as a listed business) and wish to request correction or removal, contact [CONTACT_EMAIL] or use our Corrections page. We will review promptly.

9. Security

All data is transmitted over HTTPS. Access to stored form submissions is restricted to authenticated admin staff. We do not store payment card details.

10. Updates

We may update this policy when we add new features or as legal requirements change. The "Last updated" date above tracks the most recent revision. Continued use after a change constitutes acceptance of the updated policy.