Privacy Policy

1. Introduction

Baan Orchid operates as a senior living residence in Bangkok, Thailand. This Privacy Policy explains how we collect, use, store, and protect the personal information of people who contact us, enquire about our programmes, or visit our website.

We handle personal information with care and discretion. We collect only what is necessary and do not share it beyond what is described in this policy. If you have questions, you are welcome to contact us at [email protected].

2. Information We Collect

We may collect the following types of personal information:

• Contact information: Name, email address, telephone number, and postal address when provided through our enquiry form or directly.
• Enquiry information: Details you share when asking about our programmes or your or a family member's situation.
• Residency information: For residents and programme participants, we collect information necessary to provide appropriate care and services.
• Website data: Technical information such as IP address, browser type, and pages visited — collected through cookies and analytics tools.

Legal basis for processing: We process personal data on the basis of legitimate interest (responding to enquiries), consent (marketing communications), and contractual necessity (programme delivery).

Retention: Enquiry records are kept for up to 24 months. Residency records are retained for 7 years for legal and administrative purposes. Website analytics data is retained for 14 months.

3. How We Use Your Information

• To respond to enquiries and provide information about our programmes
• To deliver and manage residency and programme services
• To communicate relevant updates about Baan Orchid (where consent has been given)
• To improve our website and understand how visitors navigate it
• To comply with applicable legal obligations

We do not use personal information to make automated decisions or for profiling purposes.

4. Sharing Your Information

We do not sell personal information. We may share information in the following limited circumstances:

• Service providers: Third parties who assist us in operating our website (such as hosting and analytics services), under appropriate data processing agreements.
• Legal requirements: Where disclosure is required by Thai law, court order, or regulatory authority.
• Family members: For resident care purposes, with the resident's knowledge and, where appropriate, consent.

5. How We Protect Your Information

We apply reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. Our website uses HTTPS encryption. Access to personal records is restricted to authorised staff members.

In the event of a data breach that may affect your rights, we will notify affected individuals and relevant authorities as required under Thai personal data protection law (PDPA).

6. Cookies

Our website uses cookies to function properly and to help us understand how it is used. You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable international standards, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate information
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Ask us to limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Withdraw consent: Withdraw consent for marketing at any time without affecting prior processing
• Lodge a complaint: File a complaint with Thailand's Personal Data Protection Committee if you believe your rights have been affected

To exercise any of these rights, please write to us at [email protected]. We aim to respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their own policies.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If we become aware that we have inadvertently done so, we will take steps to remove the data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our website. The date at the top of this page reflects the most recent revision.

11. Contact