PDPA Notice

Effective Date: 1 January 2025

This PDPA Notice explains how The Medical Travel, operated by Veltara Global Co.,Ltd. (“we”, “us”, “our”) collects, uses, discloses, and protects personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA).

The Medical Travel operates as an independent coordination and concierge service. This notice applies to all users whose personal data is processed under Thai PDPA.

1. PURPOSE OF THIS NOTICE

The purpose of this PDPA Notice is to inform users about:

What personal data we collect
How and why we process personal data
How personal data may be disclosed
How we protect personal data
The rights of data subjects under PDPA

2. PERSONAL DATA WE COLLECT

We may collect personal data voluntarily provided by you, including:

Full name
Email address
Phone number
Country of residence
Treatment interests or general medical goals
Messages or inquiries sent to us
Photos, documents, or files uploaded voluntarily

We may also collect technical data automatically, such as:

IP address
Device type
Browser information
Website usage data

Some information may include health-related data, which is provided voluntarily by the user solely for coordination purposes.

3. PURPOSE OF DATA PROCESSING

We process personal data for the following purposes:

Communicating with users and responding to inquiries
Organizing and reviewing information provided by users
Supporting coordination with third-party clinics and service providers (with user consent)
Coordinating partner services such as accommodation, transport, translation, or nurse-at-home services
Improving website functionality, security, and performance

We do NOT sell, rent, or trade personal data.

4. DATA DISCLOSURE

Personal data may be disclosed only when necessary and only with user consent, including to:

Clinics or hospitals (for coordination purposes only)
Translation or interpretation service providers
Transport providers
Accommodation providers
Nurse-at-home service providers

All third-party service providers operate independently and are responsible for processing personal data in accordance with their own privacy policies and applicable laws.

5. CROSS-BORDER DATA TRANSFERS

As an international coordination service, personal data may be transferred to or processed in Thailand or other countries where partner service providers operate.

We take reasonable steps to ensure that cross-border data transfers comply with PDPA requirements and that appropriate safeguards are in place.

6. DATA RETENTION

Personal data is retained only for as long as necessary to fulfill the purposes described in this notice, unless a longer retention period is required by applicable law.

Users may request deletion of their personal data at any time, subject to legal obligations.

7. USER RIGHTS UNDER PDPA

Under the PDPA, users have the right to:

Access their personal data
Request correction of inaccurate or incomplete data
Request deletion of personal data
Withdraw consent at any time
Request restriction or limitation of data processing
Object to certain processing activities

Requests to exercise PDPA rights may be submitted to: info@themedicaltravel.com

8. COOKIES

We use cookies and similar technologies to improve user experience, website functionality, and analytics.

Users may manage or disable cookies through browser settings. Some website features may be affected if cookies are disabled.

9. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect personal data, including:

Secure data storage
Restricted access
Reasonable security controls

While we take data protection seriously, no system can guarantee absolute security.

10. UPDATES TO THIS NOTICE

This PDPA Notice may be updated from time to time.

The most current version will be published on our website with the updated effective date.

11. CONTACT

For PDPA-related inquiries or to exercise your rights, please contact: info@themedicaltravel.com