Privacy Policy

Introduction

Lanna Haven is committed to protecting the privacy and personal information of our residents, their families, and visitors. This Privacy Policy explains how we collect, use, protect, and share your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and international data protection standards.

For questions about this policy or your personal data, please contact us at [email protected].

Information We Collect

Personal Information

We collect the following types of personal information:

• Name, contact details (email address, phone number, postal address)
• Emergency contact information
• Medical history and health information relevant to care provision
• Dietary preferences and restrictions
• Photos and videos taken during activities (with consent)
• Payment and billing information

How We Collect Information

• Directly from you or your family through intake forms and conversations
• Through our website contact forms and email communications
• From healthcare providers with appropriate consent
• Through cookies and similar technologies on our website

Legal Basis for Processing

We process your personal data based on:

• Your consent or the consent of your legal representative
• Contract performance (to provide care services you have requested)
• Legal obligation (compliance with healthcare regulations)
• Legitimate interest (improving our services and safety)

How We Use Your Information

We use your personal information to:

• Provide appropriate care and accommodation services
• Communicate with families about residents' well-being
• Process payments and maintain financial records
• Ensure safety and security on our premises
• Improve our care programs and facilities
• Comply with legal and regulatory requirements
• Respond to inquiries and provide customer support
• Send updates about our services (with your consent)

Data Sharing and Disclosure

We may share your personal information with:

• Healthcare providers involved in resident care (with consent)
• Emergency services when necessary for health and safety
• Legal and regulatory authorities as required by law
• Payment processors for billing purposes
• Service providers who assist with operations (under strict confidentiality agreements)

We do not sell or rent your personal information to third parties for marketing purposes.

Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data:

• Secure storage of physical records in locked cabinets
• Encryption of electronic data and secure servers
• Access controls limiting data access to authorized personnel only
• Staff training on data protection and confidentiality
• Regular security assessments and updates
• Procedures for reporting and managing data breaches

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected:

• Active resident records: Duration of residence plus 7 years
• Health and care records: 10 years after last service
• Financial records: 7 years as required by Thai tax law
• Marketing consent records: Until consent is withdrawn
• Website cookies: As specified in our Cookie Policy

Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the right to:

• Access: Request access to your personal data we hold
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Data Portability: Receive your data in a structured, commonly used format
• Object: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw previously given consent at any time
• Lodge a Complaint: File a complaint with the Personal Data Protection Committee of Thailand

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

We may use analytics services to understand how visitors use our website, helping us improve user experience. These services collect information anonymously.

Children's Privacy

Our services are designed for adults aged 55 and older. We do not knowingly collect personal information from individuals under 18 years of age without parental or guardian consent.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a notice on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: