How we handle your information
This notice is given under Section 23 of Thailand’s Personal Data Protection Act (PDPA). It sets out what The Astell Clinic collects, why, who receives it, and the rights you hold over it.
1. Who is responsible
The Astell Clinic (ดิแอสเทล คลินิกเวชกรรม), healthcare facility licence no. 10101026867, at 162/5 Yossunthorn, Sukhumvit 20 Alley, Khlong Toei, Bangkok 10110.
Contact: +66 92 747 8885 · LINE @theastell
2. What we collect
What you give us. When you fill in the enquiry form — your name, email address, WhatsApp number, the treatments you are interested in, and anything you write in the message field.
What is recorded automatically. The ordinary technical record any website keeps — IP address, device and browser type, which pages you viewed, where you arrived from, and how long you stayed.
What stays in your browser. Your language choice (English or 中文) is kept in your own browser. It is never sent to us or to anyone else, and clearing your browsing data removes it.
3. Why, and on what basis
To answer your enquiry, arrange your consultation, and contact you about it — on the basis of your consent and of what is necessary to respond to a request you made. You may withdraw consent at any time.
To understand how the site is used — which pages are read, which channel visitors use to reach us — on the basis of legitimate interest, in aggregate only, never to identify an individual.
4. Who receives it
The site relies on the following services, which process data to the extent needed to provide them:
- Cloudflare, Inc. (United States) — hosting and content delivery; handles the technical record above.
- Google LLC (United States) — website analytics (Google Analytics).
- Meta Platforms, Inc. (United States) — only if you choose to message us on WhatsApp. That conversation is governed by WhatsApp’s own terms.
- LY Corporation (Japan) — only if you choose to message us on LINE.
We do not sell your personal data, and we do not pass it to advertisers or data brokers.
5. What we do not send to analytics
This deserves its own section. The contents of the enquiry form do not go into Google Analytics. Your name, your email, your phone number, your message — and which treatments you selected — reach the clinic and nowhere else.
Treatment choices are health-related information. Analytics receives only a number — how many boxes were ticked — never which ones. When you use the form, the message is sent from your own WhatsApp account straight to the clinic.
We do not build advertising audiences from which treatment pages you read, and no advertising pixel is installed on this site.
6. Sending data abroad
The services above operate servers outside Thailand. Under PDPA Sections 28–29 we use them only where the destination or the provider maintains an adequate standard of protection, supported by standard contractual terms.
7. How long we keep it
Enquiries: 2 years from our last contact, unless you become a patient of the clinic — in which case medical-records rules apply instead.
Analytics: kept in aggregate, with event-level data set to expire after 2 months.
8. Your rights
Under PDPA Sections 30–36 you may ask to see what we hold about you, to have it corrected, to have it deleted or its use stopped, to restrict how it is processed, to receive a copy in a portable form, and to object to particular processing.
Ask through any of the contact details above. We will respond within 30 days.
9. If you are not satisfied
You may complain to the Office of the Personal Data Protection Committee (PDPC), under Thailand’s Ministry of Digital Economy and Society.
Last updated 21 September 2026