Privacy Policy

We may collect:

• Name, surname, gender, age or date of birth
• Telephone number, email address, LINE, WhatsApp or other contact details
• Contact, billing or delivery address
• Account and login information
• Appointment, booking, order, service, package and transaction history
• Payment and transaction-related information; full card details may be processed directly by external payment providers
• Messages, images, documents and information you submit through our website or communication channels
• Technical information such as IP address, device, browser, operating system, pages visited, usage time and Cookie data
• Preferences, language settings and marketing choices

Because LINNA Clinic provides medical, aesthetic, longevity, wellness and healthcare-related services, you may choose to provide health-related information including:

• Medical and treatment history
• Medical conditions, allergies or medications
• Laboratory or health test results
• Photographs submitted for medical or aesthetic assessment
• Information relating to treatment plans, services or medical recommendations

We process such information only where necessary and permitted by applicable law, including where explicit consent has been provided or another lawful basis or exception permits the processing.

We may obtain information when you:

• Complete a website form
• Request a consultation or book an appointment
• Purchase a product or service
• Register or log in to an account
• Contact us by telephone, email, LINE, WhatsApp or social media
• Send photographs, documents or test results
• Receive services at LINNA Clinic

Technical data may also be collected automatically through Cookies and similar technologies.

We may process information to:

• Respond to enquiries
• Provide information about products, services and programs
• Arrange consultations, appointments and bookings
• Coordinate with physicians, medical personnel or relevant service providers
• Process purchases, payments, deliveries and financial documents
• Manage accounts
• Provide customer service and follow-up
• Improve our website and services
• Protect security and prevent fraud or misuse
• Meet legal, regulatory, accounting, tax and healthcare obligations
• Conduct statistical and service analysis
• Send news, offers or marketing communications where permitted by law or where required consent has been obtained

You may opt out of marketing communications using the method provided in the communication or by contacting us.

Depending on the activity, processing may be based on:

• Performance of a contract or steps requested before entering into a contract
• Compliance with legal obligations
• Our legitimate interests where they do not override your rights
• Your consent
• Other lawful grounds or exceptions applicable to health or sensitive personal data

Where necessary, information may be shared with:

• Physicians, nurses and personnel involved in your care
• Laboratories, hospitals and healthcare partners
• Website, cloud hosting, database and IT providers
• Payment providers, banks and financial institutions
• Shipping and logistics providers
• Analytics, communications and marketing providers where permitted
• Professional advisers such as accountants, auditors and legal advisers
• Government authorities or regulators where required by law

We do not sell your personal data to third parties.

Some technology, cloud, payment, analytics or communications providers may process information outside Thailand.

Where personal data is transferred internationally, we will take appropriate steps in accordance with applicable data protection law.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, medical, accounting or regulatory obligations.

Retention periods may vary according to the type of information.

When information is no longer required, we will appropriately delete, destroy or anonymize it.

Subject to applicable law, you may have the right to:

• Access and obtain a copy of your personal data
• Request correction of inaccurate information
• Request deletion in certain circumstances
• Request restriction of processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent at any time without affecting processing lawfully conducted before withdrawal
• Submit a complaint to the competent supervisory authority

Certain rights may be limited where retention or processing is required by law.

Our website may use Cookies and similar technologies to operate the website, remember preferences, understand usage and perform other functions according to your choices and applicable law.

Please see our Cookie Policy for additional information.

We use appropriate organizational, physical and technical safeguards designed to protect personal data against unauthorized access, use, alteration, disclosure or loss.

No internet transmission or storage system can, however, be guaranteed to be completely secure.

Our website may link to third-party websites or services. This Privacy Policy does not govern the privacy practices of those third parties.

Where a service involves a minor, parental or legal guardian authorization will be handled where required by applicable law.

We may update this Privacy Policy to reflect changes in our services, technology or legal requirements.

The “Last updated” date will identify the latest version.