Privacy Policy — Pattaya Medical

The short version.

Pattaya Medical does not run ad networks, retargeting pixels, third-party social trackers, or any cross-site tracking beyond basic analytics. We do not sell, rent, or share visitor data. The only personal data we receive is what you choose to send us by email (e.g. a correction or tip) — that's it.

What we collect, and why.

1. Cloudflare Web Analytics (cookieless).

We use Cloudflare's privacy-preserving analytics to count page views, see referrer domains, and understand which facility pages are popular. Cloudflare Web Analytics is cookieless, processes data in aggregate, and does not use fingerprinting. No personally identifying information is captured. The legal basis under PDPA is our legitimate interest in operating and improving the publication.

2. Google Analytics 4 (anonymised).

We run a Google Analytics 4 (GA4) property with IP anonymisation enabled and Google Signals disabled. This captures aggregated visitor behaviour (sessions, geography at country level, device type, page paths). GA4 uses first-party cookies which are limited in lifetime; it does not personally identify you to us. The legal basis under PDPA is our legitimate interest in operating and improving the publication.

3. Server logs (transient).

Our hosting provider, Cloudflare, retains brief access logs (IP, request, user-agent, timestamp) for operational security and abuse prevention. We do not access these logs except to investigate a specific abuse or security incident. The legal basis under PDPA is legitimate interest in keeping the site available and safe.

4. Email correspondence.

If you email info@pattaya-medical.com, we keep the message for as long as is reasonable to handle your request and any follow-up. We do not put email addresses on mailing lists or share them with any third party. The legal basis under PDPA is your consent (by sending us the email).

What we don't do.

No advertising network. No ad pixels. No retargeting.
No Facebook pixel, no LinkedIn pixel, no TikTok pixel.
No third-party social embeds that drop trackers on you.
No cross-site behavioural profiling.
No selling, renting, or licensing of visitor data.
No mailing list. No newsletter (yet). No reader account system.

Cookies.

Cloudflare Web Analytics is cookieless. The only cookies on the site come from GA4 (first-party, with anonymised IP). Because we do not set advertising or non-essential third-party cookies, and because GA4 with anonymisation is treated as a lawful processing basis in most jurisdictions, we do not display a cookie banner. If your local law mandates one and you'd like more granular control, please use your browser's built-in tracking-protection or content-blocking features.

Your rights under the Thai PDPA.

If you are a data subject under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the right to:

Request access to any personal data we hold about you.
Request rectification of inaccurate data.
Request erasure of your personal data, subject to lawful exceptions.
Object to processing based on legitimate interest.
Withdraw consent where consent is the basis of processing.
Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

Because we collect so little to begin with — anonymised analytics and the contents of any email you send us — most of these requests for our site amount to "delete the email you sent us", which we will do on request.

How to exercise your rights.

Email info@pattaya-medical.com with your request. We aim to respond within fourteen (14) days. We may need to ask follow-up questions to verify your identity before acting on a request.

Data transfers.

Cloudflare and Google operate globally and process data in jurisdictions outside Thailand. Both providers offer standard contractual safeguards and are compliant with major international data-protection frameworks. By using the site you understand that limited, anonymised analytics data is processed in those jurisdictions.

Data controller.

TIMPAEMI Co., Ltd.
Pattaya, Thailand
Contact: info@pattaya-medical.com

Changes to this policy.

We will update this page if our practice changes. The current version always carries a "last updated" date at the bottom. Significant changes will be summarised at the top of the page for at least 30 days.

Disclaimer. This privacy policy is part of an editorial publication. It is not legal advice. If you need legal advice on Thai PDPA, GDPR, or any other data-protection framework, please consult a qualified data-protection lawyer.

Privacy policy.