Privacy Policy
B.R.C.K. Co., Ltd., operator of Rehab Care Clinic (“the Company”, “we” or “us”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and protect your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) when you use rehabcareclinic.com, contact us or book an appointment.
1. Personal data we collect
- Identity and contact data, such as your name, phone number, email address and LINE ID.
- Appointment data, such as your preferred branch and appointment date and time.
- Health data (sensitive personal data), such as the symptoms you tell us about in the appointment form or information you provide during examination and treatment.
- Organisation data, for corporate enquiries, such as company name, number of employees and budget.
- Technical data, such as IP address, browser and device type, access date and time, and cookie data (see “Cookies”).
2. Purposes and legal bases
- To respond to enquiries and arrange appointments – performance of a contract or steps taken at your request before entering into a contract.
- To assess your symptoms and give initial health advice – your explicit consent, for health data.
- To provide medical and physical therapy services and keep medical records – performance of a contract, legal obligations (including laws governing medical facilities) and your explicit consent.
- To prepare quotations and corporate programmes – steps taken at your request before entering into a contract.
- To keep the website secure, improve it and prevent spam and misuse – legitimate interests.
- To send news, promotions or marketing – only with your consent, which you may withdraw at any time.
3. Health data and explicit consent
Health data is sensitive personal data under Section 26 of the PDPA. We collect and use it only with your explicit consent (for example, by ticking the consent box in the appointment form) or where another legal basis permitted by law applies. You may withdraw your consent at any time; withdrawal does not affect processing carried out before it.
4. Disclosure of personal data
We do not sell your personal data. We may disclose it, only as necessary, to:
- doctors, physical therapists and staff at any of our branches who are involved in providing services to you;
- service providers who process data on our behalf, such as web hosting, email and appointment-management providers, under contracts requiring confidentiality and security;
- government authorities or other persons where required by law, court order or a competent authority.
Our website contains third-party content such as YouTube and TikTok videos, Google Maps and links to Facebook, Instagram and LINE. These providers may collect data about you under their own privacy policies.
5. International transfers
Some of our service providers may store data on servers outside Thailand. Where this happens, we ensure adequate personal data protection measures are in place as required by the PDPA.
6. Retention
We keep personal data only for as long as necessary for the purposes described. Data submitted through the website’s contact and appointment forms is kept for no more than 2 years from receipt, unless you become a patient, in which case medical records are kept for the period required by the laws governing medical facilities. After that, data is deleted, destroyed or anonymised.
7. Your rights
Under the PDPA you have the right to:
- withdraw your consent;
- access and obtain a copy of your personal data;
- have your data corrected, kept up to date and complete;
- have your data erased or destroyed;
- restrict the use of your data;
- object to the collection, use or disclosure of your data;
- data portability;
- lodge a complaint with the Personal Data Protection Committee (PDPC).
To exercise these rights, contact us using the details in section 11. We will respond within 30 days of receiving your request.
8. Cookies
Our website uses cookies that are necessary for it to work, such as a cookie that remembers your cookie consent choices (cookiesjsr) and session cookies for site administrators. If we use other cookies in the future, such as analytics or marketing cookies, we will always ask for your consent first. You can change your cookie settings at any time in Cookie settings or read more in the cookie documentation.
9. Security
We use appropriate technical and organisational security measures, such as encrypted connections (HTTPS), access limited to authorised staff and spam protection, to prevent loss and unauthorised access, use, alteration or disclosure of personal data.
10. Changes to this policy
We may update this policy from time to time. The latest version will be published on this page with its effective date.
11. Contact us
B.R.C.K. Co., Ltd. (Rehab Care Clinic)
Email: clinicrehabcare@gmail.com
Phone: +66 61 801 2482
LINE: @rehabcare
Or contact us in person at any Rehab Care Clinic branch.
This policy is effective from 20 October 2026.
