Privacy Policy

Privacy Policy

Effective Date: July 5, 2026 (last updated October 27, 2026)

Welcome to Velalux Clinic. We are committed to protecting the privacy and security of our clients' personal and medical information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our clinic at Park Origin Thonglor, Bangkok, use our website, or interact with our services.

1. Information We Collect

To provide you with the highest standard of care and customer experience, we may collect the following types of personal data:

• Identity Data: First name, last name, date of birth, age, gender, and national ID or passport number.
• Contact Data: Phone number, email address, physical address, and emergency contact details.
• Health & Medical Data (Sensitive Data): Medical history, current medications, allergies, previous aesthetic treatments, photographs (before/after treatment), and consultation notes.
• Financial Data: Payment details, credit card information, and billing address (processed securely via our payment gateways).
• Technical & Usage Data: IP address, browser type, and interactions with our website or digital platforms (such as our booking system).

2. How We Use Your Information

We collect and process your data for the following essential purposes:

• Providing Medical & Aesthetic Services: To accurately assess your suitability for treatments (such as injectables, lasers, or IV drips), track your progress, and ensure your safety.
• Administrative & Operational Purposes: To manage appointments, process payments, and maintain your patient file.
• Communication: To send appointment reminders, post-treatment care instructions, and respond to your inquiries.
• Marketing (With Consent): To inform you about new treatments, exclusive promotions, or clinic updates. You may opt out of promotional communications at any time.

3. Disclosure of Your Information

We treat your personal and medical data with strict confidentiality. We do not sell or rent your data to third parties. We may share your information only under the following circumstances:

• Service Providers: With trusted third-party vendors who assist in clinic operations (e.g., booking software, payment processors, IT support), all of whom are bound by strict data protection agreements.
• Legal & Regulatory Obligations: If required by law, court order, or requested by Thai health regulatory authorities.
• Medical Emergencies: With other healthcare professionals in the event of an emergency requiring immediate medical attention.

4. Data Security & Retention

We implement robust administrative, technical, and physical security measures to protect your personal information against unauthorized access, loss, or alteration.

• Retention: We retain your patient records and personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by Thai medical and legal data retention guidelines. Once the data is no longer necessary, it is securely destroyed or anonymized.

5. Your Data Protection Rights

Under the PDPA, you possess specific rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, subject to legal and medical record-keeping requirements.
• Right to Withdraw Consent: Where we rely on your consent (such as for marketing or using before/after photos), you may withdraw it at any time.

6. Consent to Use Photographs

Photographs and videos taken for clinical documentation (before, during, and after treatments) are kept strictly confidential within your medical file. We will never use your images for marketing, social media, or public display without obtaining your explicit, separate written consent.

7. Chats on LINE, Messenger, Instagram and WhatsApp

When you message Velalux Clinic on LINE, Facebook Messenger, Instagram or WhatsApp:

• What we receive: Your name or profile name as shown in that app, the messages you send us, and any photos you send.
• Why we use it: To answer your questions, give you prices, and book, move or cancel your appointments. If you are already our client, we link the chat to your client record so we can see your appointments and treatment history.
• Who replies: Replies come from an automated assistant and from our staff. Medical questions are answered by our doctors.
• Service providers: To run our chats we use Anthropic (to prepare replies), Cloudflare (hosting and storage) and Google (calendar and records). They process your data only on our behalf. LINE and Meta (Messenger, Instagram and WhatsApp) also process your messages under their own privacy policies.
• How long we keep chats: A chat with no new messages for 12 months is deleted, together with the photos sent in it. Appointment and treatment records are kept as described in section 4.
• Seeing or deleting your chat data: Ask us in the chat, by phone or by email (details below) and we will show you or delete your chat data, subject to section 5.

8. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns regarding your data, please contact our Data Protection Officer (DPO) or clinic management team at:

Velalux Clinic (operated by บริษัท เวลาลักซ์ จำกัด / Velalux Co., Ltd.)

• Location: Park Origin Thonglor, Bangkok, Thailand
• Phone: 099-625-5556
• Email: velaluxclinic@gmail.com
• Website: https://www.velaluxclinic.com

‍