Doctor Top Clinic respects your privacy. This notice explains our website-related collection, use, disclosure, retention and protection of personal data. Clinical records, medical treatment consent and patient-care systems may be subject to additional notices provided when you receive services.
Who is responsible for your data?
Data controller/contact: Doctor Top Clinic, 666/44 Sirinakhon Square, Nai Mueang, Mueang Nakhon Si Thammarat, Nakhon Si Thammarat 80000, Thailand.
Questions, withdrawal requests or privacy-rights requests may be sent to kctech18622@gmail.com or made through the clinic’s official contact channels.
What data may be involved?
Information you choose to provide when contacting us, such as your name, telephone number, social media handle, message and preferred service.
Technical information normally generated when accessing a website, such as IP address, device/browser details, requested pages, timestamps and security logs, where recorded by our hosting systems.
Where an account owner connects an authorised TikTok or Facebook Page account, the integration may process account identifiers, basic profile information, public video metadata, thumbnails, links and access authorisation tokens within the permissions granted.
Photos or testimonials submitted for public display may include identifying images and other sensitive information. Any such publication requires an appropriate legal basis and permission under applicable law; medical details should not be sent through an ordinary website contact channel.
Why and on what basis do we use data?
To reply to enquiries, arrange requested contact and provide information about clinic services; depending on the circumstances, this may be necessary to take steps at your request or serve legitimate operational interests.
To secure, maintain and diagnose the website, prevent misuse and meet applicable legal obligations, using an appropriate lawful basis.
To connect an explicitly authorised clinic-controlled social account, retrieve public posts and video information and publish eligible items when the clinic owner enables automated publication; permissions are requested through the platform’s authorisation process. Content involving patients, treatment outcomes or uncertain rights remains subject to additional review.
To publish identifiable patient reviews or treatment imagery only where a suitable, documented permission or other lawful basis exists, including explicit consent where required for sensitive personal data. Marketing use is separate from treatment.
TikTok and Facebook connections
TikTok Login Kit is used to let an account owner authorise access. Permissions requested for video display may include user.info.basic (basic account information) and video.list (public video metadata). We do not need permission to post to your TikTok account for this website feature.
A Facebook Page integration, if enabled, may retrieve Page videos and photo posts with the permissions authorised for that Page. The clinic owner can enable automated publication of general eligible content or require manual review. Patient or treatment media require appropriate specific permission.
Account owners may revoke access through the relevant platform settings and may ask the clinic to disconnect the account. Platform operators also process data under their own privacy notices.
Recipients and international transfers
Information may be processed by authorised clinic staff and by hosting, security, communications or social-platform service providers insofar as needed to run the website.
Using TikTok, Facebook, LINE or other external services may involve processing or transfers outside Thailand. Such activity is subject to applicable legal safeguards and the providers’ separate privacy policies. We do not publish private authorisation tokens.
Retention and security
We keep information only for as long as necessary for the relevant purpose and any applicable legal, contractual or dispute-resolution requirements. Enquiry information is reviewed when follow-up is complete; platform tokens remain necessary only while a connection is authorised; publication materials are reviewed when permission ends or withdrawal requests are received. Actual deletion or restricted retention may be subject to lawful exceptions.
We use access restrictions and appropriate technical and organisational safeguards; however, internet transmission and storage cannot be guaranteed to be entirely risk-free.
Your rights
Subject to Thailand’s Personal Data Protection Act B.E. 2562 (2019) and its conditions, you may request access or a copy, correction, deletion, restriction, objection, data portability where applicable, or withdrawal of consent, and may lodge a complaint with the competent authority.
Please email kctech18622@gmail.com with enough information to identify the relevant data. We may need to verify your identity before acting. Withdrawing consent does not retrospectively invalidate lawful processing already performed.
Cookies, external links and changes
The site and hosting environment may use technically necessary session or security mechanisms. External videos, maps and social services are governed by their own policies when visited or embedded. Any optional analytics or marketing tracking should be disclosed and controlled before activation.
We may revise this notice when website features or processing practices change. The effective date will be shown on this page.