The clinic is now open
Doctor Schedule
TH
EN
Reva Clinic

Privacy & PDPA Policy

Privacy & PDPA Policy

Reva Clinic

Reva Clinic (“the Clinic,” “we,” “us”) is committed to protecting the personal data of our clients, service users, and website visitors in accordance with the Personal Data Protection Act (PDPA). This policy explains how we collect, use, disclose, and safeguard personal data.

1. Personal Data We Collect

The Clinic may collect the following types of personal data:

  • Contact information: full name, phone number, email address, Line ID

  • Appointment, consultation, and service purchase information

  • Basic health information relevant to aesthetic treatments

  • Before-and-after treatment images (with prior consent)

  • Online usage data: cookies, IP address, device information

  • Data obtained from marketing channels such as Facebook, Instagram, and Line Official Account

2. Purposes of Data Collection and Use

We collect and use personal data for the following purposes:

  • To provide services, conduct aesthetic assessments, and follow up on treatment results

  • To verify identity, manage appointments, and communicate with clients

  • To create client records and provide after-sales services (CRM)

  • To provide information about promotions, news, and clinic activities (with consent)

  • To improve services, analyze usage, and conduct online marketing

  • To comply with applicable laws and medical regulations

3. Disclosure of Personal Data

The Clinic does not sell or disclose personal data to third parties, except in the following cases:

  • Technology service providers, CRM systems, and appointment booking systems

  • Advertising platforms such as Meta (Facebook/Instagram) and Google

  • Regulatory authorities or where disclosure is required by applicable laws

4. Data Retention and Security

Personal data is stored securely with access restricted to authorized personnel only, using appropriate security measures in accordance with recognized standards.

Data will be retained only for as long as necessary to fulfill medical, service, and legal purposes.

5. Data Subject Rights

You have the following rights under applicable law:

  • The right to access and obtain a copy of your personal data

  • The right to request correction of inaccurate data

  • The right to withdraw consent

  • The right to request deletion or destruction of data (subject to legal conditions)

  • The right to object to the processing of personal data

6. Cookies and Tracking Technologies

The Clinic’s website uses cookies, Meta Pixel, and Google Analytics to analyze usage, improve user experience, and conduct remarketing. These technologies do not directly identify individuals.

7. Marketing Communications

The Clinic may send news, promotions, or special offers via SMS, Line Official Account, or other digital channels only with your consent.

You may opt out of receiving communications at any time.

8. Policy Updates

The Clinic may update this policy from time to time to comply with legal requirements or changes in our services. Any updates will be announced on the website.

9. Contact Information

If you wish to exercise your rights under the PDPA or have any questions regarding this policy, please contact:

Reva Clinic