Privacy Policy

Dr. PAUL Hair Clinic is committed to protecting the personal data of our service users, website visitors, inquirers, and all related parties. The clinic collects, uses, and discloses personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) and applicable laws.

This Privacy Policy explains how we collect, use, disclose, and manage your personal data, as well as your rights as a data subject when you access drpaulhairclinic.com, fill out contact forms, make appointments, request consultations, apply for employment, or contact the clinic through any channel.

Data Controller

The data controller under this policy is:

Dr. PAUL Hair Clinic
Website: drpaulhairclinic.com
Phone: +662-125-2634
Address: 1503/1-2 Sukhumvit Road, Phra Khanong, Khlong Toei, Bangkok 10110

Personal Data We Collect

We may collect your personal data when you use our website, contact us, or use our services. This may include:

Identity data — name, nickname, gender, age, date of birth
Contact data — phone number, email, LINE ID, address
Service-related data — appointment dates, branch visited, services of interest, inquiry history
Health or sensitive data — hair loss concerns, treatment history, scalp information, drug allergies, underlying conditions, before-and-after photos, or other data related to hair transplant assessment
Technical data — IP address, browser type, device type, website usage behavior
Voluntarily submitted data — inquiry messages, supporting documents, photos, or online form submissions

Sources of Data

We may receive your personal data from the following sources:

Directly from you, such as through website forms, consultation registrations, or contact via phone, LINE, or other online channels
Automatically through your use of our website via cookies or similar technologies
From representatives or contacts acting on your behalf
From business partners, advertising service providers, analytics platforms, or online booking systems, to the extent permitted by law

Purposes of Collection, Use, and Disclosure

We collect, use, and disclose your personal data for the following purposes:

To respond, provide information, answer questions, and offer consultations about our services
To manage appointments, confirm bookings, provide medical services, and follow up on treatment
To assess suitability for hair transplantation and related treatments, which may require health data and photos
To improve our website, services, user experience, and marketing communications
To send news, promotions, privileges, or service information that may be relevant to your interests — where required by law, we will seek your consent beforehand
To comply with laws, regulations, government orders, or to establish, defend, or exercise legal claims

Legal Basis for Processing

We may process your personal data under the following legal bases, as appropriate:

Your consent
To fulfill your request prior to entering into a contract, or to perform a service agreement
For the clinic’s legitimate interests, such as website management, security, and service quality improvement
To comply with legal obligations
To prevent or mitigate harm to life, body, or health
For preventive medicine, diagnosis, healthcare, or medical treatment purposes, to the extent permitted by law for sensitive data

Where we process health data or other sensitive data, we will strictly comply with legal requirements and obtain explicit consent where necessary.

Disclosure of Personal Data

We may disclose your personal data only as necessary to the following parties:

Internal clinic personnel including physicians, nurses, coordinators, and customer service teams
External service providers involved in clinic operations, such as website developers, hosting providers, CRM systems, appointment systems, messaging services, website analytics providers, or marketing agencies
Legal advisors, auditors, or relevant professional service providers
Government or regulatory authorities when required by law or by lawful order

We will require such recipients to maintain appropriate data protection measures and process data only as necessary for the specified purposes.

International Data Transfers

In some cases, we may store or transfer your personal data internationally, such as when using cloud systems, analytics, email platforms, advertising platforms, or software from overseas providers. We will comply with PDPA requirements and ensure appropriate data protection measures are in place.

Data Retention Period

We will retain your personal data only as long as necessary for the stated purposes and as required by law, or as needed to establish legal claims, comply with legal obligations, and operate the clinic.

Once the retention period has ended, we will delete, destroy, or anonymize your data using appropriate methods and standards.

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

Remember your usage preferences
Analyze website usage
Improve website performance
Support online advertising and marketing

You may configure your browser to reject cookies. However, disabling certain types of cookies may affect the functionality of some website features.

Security Measures

We implement appropriate technical and administrative security measures to protect your personal data against loss, unauthorized access, use, alteration, modification, or disclosure.

These measures may include access controls, password systems, data encryption, access logging, and selection of service providers with appropriate security standards.

Your Rights as a Data Subject

Under the PDPA, you may have the following rights regarding your personal data:

Right to access and receive a copy of your personal data
Right to request correction of inaccurate, outdated, or incomplete data
Right to request deletion, destruction, or anonymization of your data
Right to request restriction of data use
Right to object to data processing in certain cases
Right to withdraw consent, where processing is based on consent
Right to lodge a complaint with the relevant supervisory authority if you believe your data has been processed unlawfully

The exercise of certain rights may be limited under conditions prescribed by law.

Data of Minors

If you are a minor, an incompetent person, or a person of limited legal capacity, providing personal data to the clinic may require consent from a parent, legal guardian, or custodian as required by law.

If the clinic becomes aware that data has been collected from a minor without valid consent, we may suspend processing and take appropriate action promptly.

Links to External Websites

Our website may contain links to third-party websites or services, which have their own separate privacy policies. We are not responsible for the content or data practices of such external websites.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in laws, services, or the website. We will notify you of any updated policy through our website.

Last updated: February 1, 2026

Contact Us

If you have any questions, suggestions, or wish to exercise your rights regarding your personal data, please contact:

Dr. PAUL Hair Clinic
Website: drpaulhairclinic.com
Phone: +662-125-2634
Address: 1503/1-2 Sukhumvit Road, Phra Khanong, Khlong Toei, Bangkok 10110