{"id":1240,"date":"2025-11-06T08:26:09","date_gmt":"2025-11-06T01:26:09","guid":{"rendered":"https:\/\/www.cytoaurorathailand.com\/privacy-policy\/"},"modified":"2025-11-25T13:32:21","modified_gmt":"2025-11-25T06:32:21","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/cytoaurorathailand.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Privacy Policy<\/strong><\/p>

Cyto Aurora Biotechnology (Thailand) Co., Ltd. recognizes the importance of protecting the personal data of its service users, customers, and website visitors. This Policy has been prepared to explain the purposes, methods, and guidelines for the collection, use, and disclosure of personal data in accordance with the Personal Data Protection Act B.E. 2562 (the \u201cPersonal Data Protection Act\u201d or \u201cPDPA\u201d).<\/p>

Scope of Use<\/strong><\/p>

This Privacy Policy applies to the personal data collected by Cyto Aurora Biotechnology (Thailand) Co., Ltd. through the use of or contact via various channels, including:<\/p>

Use of the Company\u2019s website, such as visiting, registering, or using online services, where certain data may be automatically collected (e.g. IP address or cookies) to improve the user experience.
Completion of online forms, such as appointment forms, newsletter subscriptions, or surveys, where necessary information such as name, telephone number, or email address may be requested in order to provide appropriate services.
Communications with the Company via telephone, email, or social media, where the information received will be used to provide services, respond to inquiries, or carry out your requests.<\/p>

The Company will collect, use, and protect your personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) and strict security measures to ensure that your information is properly safeguarded.<\/p>

Types of Data We Collect<\/strong><\/p>

We collect only the information necessary for providing our services and carrying out our operations, which may include:<\/p>

1. Personally Identifiable Information<\/p>

  • First name, last name, date of birth, gender<\/li>
  • Address, email address, and telephone number<\/li>
  • National ID number or passport number (when necessary)<\/li><\/ul>

    2. Health and Medical Information (Sensitive Data)<\/p>

    • Medical history, diagnoses, laboratory test results, genetic test results (if any)<\/li>
    • Treatment information, medications, and records of medical visits<\/li><\/ul>

      3. Payment Information<\/p>

      • Billing information, receipts, and payment details (some of which may be passed on to payment service providers)<\/li><\/ul>

        4. Website and Technical Information<\/p>

        • Website usage data such as IP address, browser type, cookies, and usage behavior (for service improvement)<\/li><\/ul>

          The Company will collect only the data necessary for clearly defined purposes and will not use the data for any other purposes beyond those communicated, unless consent has been obtained from the data subject.<\/p>

          Purposes of Data Use<\/strong><\/p>

          We will use your data only for clearly defined purposes, as follows:<\/p>

          To provide diagnostic and medical treatment services to patients
          To manage appointments, issue receipts, and process billing
          To communicate and send important notifications related to treatment, test results, or appointments
          To improve the quality of our services, and for internal research and development (with your data anonymized when used for statistical analysis)
          To comply with applicable laws, regulations, or orders issued by government authorities
          For direct marketing purposes (with your prior consent), such as news, promotions, and clinic activities<\/p>

          Legal Bases for Processing Personal Data<\/strong><\/p>

          Our processing of personal data is based on at least one of the following legal grounds:<\/p>

          Consent of the data subject – for marketing activities or processing that is not strictly necessary for the provision of services
          Performance of a contract or steps prior to entering into a contract- such as providing medical treatment and managing appointments
          Compliance with legal obligations – to fulfill legal and regulatory requirements
          Legitimate interests of the data controller – such as fraud prevention or ensuring the security of our systems<\/p>

          Disclosure of Data to Third Parties<\/strong><\/p>

          The Company may disclose personal data to:<\/p>

          Information technology service providers (such as cloud service providers and system administrators) to support our operations
          Partner healthcare providers (specialist physicians, laboratories) when necessary for patient care
          Payment service providers and accounting service providers
          Government agencies or regulatory authorities when requested or as required by law<\/p>

          Such disclosures will be carried out under data protection agreements (Data Processing Agreements) or appropriate contracts to ensure adequate data protection and limitations on the use of such data.<\/p>

          Cross-Border Data Transfers<\/strong><\/p>

          If personal data is transferred to other countries, the Company will proceed in compliance with applicable laws and will ensure that the recipient provides an adequate level of data protection or that appropriate safeguards are in place.<\/p>

          Data Security<\/strong><\/p>

          The Company implements appropriate technical and organizational measures to protect personal data, such as:<\/p>

          Data encryption where necessary
          Role-based access control
          Data backup, monitoring, and event logging
          Staff training on data protection<\/p>

          Although these measures are in place, no system can be 100% secure. Therefore, we have procedures for incident notification and response in the event of a data breach.<\/p>

          Data Retention Period<\/strong><\/p>

          Personal data will be retained only for the purposes notified and for the period required by law, for example:<\/p>

          Patient information and medical records: retained for the period specified by applicable laws or professional standards
          Financial and accounting records: retained in accordance with tax and accounting laws<\/p>

          After the applicable retention period has ended, the Company will delete or anonymize the data in accordance with appropriate standards.<\/p>

          Rights of Data Subjects<\/strong><\/p>

          You have rights under personal data protection laws (such as the PDPA), including but not limited to the right to:<\/p>

          Request access to your personal data
          Object to certain types of data processing
          Request correction of inaccurate or incomplete data
          Request deletion or suspension of the processing of your data (where permitted by law)
          Request the transfer of your data in a machine-readable format (data portability)<\/p>

          If you wish to exercise any of these rights, please contact our Data Protection Officer.<\/p>

          Cookies and Related Technologies<\/strong><\/p>

          Our website may use cookies and tracking technologies for purposes such as improving user experience, analyzing usage, and supporting advertising activities. You can manage your cookie preferences through your browser settings or via the tools we provide on our website.<\/p>

          Contact and Complaints<\/strong><\/p>

          If you have any questions, requests, or wish to exercise your rights, please contact:<\/p>

          Data Protection Officer (DPO)
          Email: [admin@cytoaurora.co.th]
          Telephone: +66 65-715-2539
          Address: CytoAurora Biotechnology (Thailand) Co., Ltd.<\/p>

          If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee or the relevant supervisory authority.<\/p>

          Policy Updates<\/strong><\/p>

          We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any significant changes will be announced on our website and\/or communicated to you.<\/p>

          Additional Provisions for Sensitive Data<\/strong><\/p>

          The processing of health data and other sensitive personal data will be carried out under strict limitations and, in general, will require written consent or be based on a clearly defined legal basis.<\/p>

          Third-Party Data Processors<\/strong><\/p>

          When we engage external service providers to process personal data on our behalf, we will enter into a Data Processing Agreement that specifies security requirements, scope of use, and restrictions on data transfers.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

          Privacy Policy Privacy Policy Cyto Aurora Biotechnology (Thailand) Co., Ltd. recognizes the importance of protecting the personal data of its service users, customers, and website visitors. This Policy has been prepared to explain the purposes, methods, and guidelines for the collection, use, and disclosure of personal data in accordance with the Personal Data Protection Act […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1240","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/pages\/1240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/comments?post=1240"}],"version-history":[{"count":12,"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/pages\/1240\/revisions"}],"predecessor-version":[{"id":1719,"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/pages\/1240\/revisions\/1719"}],"wp:attachment":[{"href":"https:\/\/cytoaurorathailand.com\/en\/wp-json\/wp\/v2\/media?parent=1240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}