Privacy Policy

1. Introduction and Data Controller

Orivane operates a residential care facility located at 77 Moo 6, Nong Kham, Si Racha, Chonburi 20110, Thailand. For the purposes of this policy, Orivane is the data controller — meaning we determine how and why personal data is processed.

This policy applies to personal data collected through our website at orivaneen.live, through enquiry forms, telephone calls, in-person consultations, and in the course of providing care services.

For questions regarding this policy or the handling of your data, please contact: [email protected]

2. Personal Data We Collect

Depending on how you interact with Orivane, we may collect the following categories of personal data:

Enquiry and contact information: name, email address, telephone number, and message content submitted through our contact form or provided by phone.

Care-related information: for prospective and current residents and their families — details about the senior's health background, care needs, dietary requirements, emergency contacts, and family preferences. This information is collected only through direct consultation and is treated with the highest level of discretion.

Website usage data: if you have consented to analytics cookies, we may collect information about pages visited, session duration, and device type through third-party tools such as Google Analytics.

Communications: records of correspondence between Orivane and families, including emails and written summaries, are retained as part of the care record.

3. How We Use Personal Data

We use personal data for the following purposes, each of which has a legal basis under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

Responding to enquiries (legitimate interest): to contact you in response to a message or call about our services.

Delivering care services (contractual necessity): to fulfil our obligations as a care provider, including care planning, health monitoring, and family communication.

Service improvement (legitimate interest): to understand how our website is used and how our services can be improved, using aggregated and anonymised information where possible.

Legal compliance (legal obligation): to meet requirements under applicable Thai law, including healthcare and record-keeping regulations.

4. Data Retention

We retain personal data only for as long as is necessary for the purpose it was collected, or as required by law:

Enquiry data submitted via our contact form: retained for up to 12 months if no care arrangement results from the enquiry.

Care records for current and former residents: retained for a minimum of 7 years following the end of care, in accordance with Thai healthcare regulations.

Website analytics data: retained for up to 26 months, subject to your cookie preferences.

5. How We Protect Your Data

Orivane takes the security of personal data seriously. The measures we apply include:

Secure, encrypted storage of digital records on access-controlled systems.

Physical care documents stored in locked cabinets accessible only to authorised care staff.

Staff training on data handling responsibilities and confidentiality obligations.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and the relevant supervisory authority as required by the PDPA.

6. Cookies

Our website uses cookies to function and, where you have given consent, to collect usage data. The categories of cookies we use are: essential cookies (always active), analytics cookies, marketing cookies, and preference cookies (all optional).

For detailed information and to manage your preferences, please visit our Cookie Policy.

7. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to personal data we hold about you:

Right of access: you may request a copy of the personal data we hold about you.

Right of rectification: you may request that inaccurate or incomplete data be corrected.

Right to erasure: you may request deletion of your personal data where there is no legitimate reason for us to continue holding it.

Right to data portability: you may request a copy of your data in a structured, machine-readable format.

Right to object: you may object to processing based on legitimate interest.

Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee.

8. Third-Party Services and Links

Our website may include links to external sites such as mapping services (Google Maps) and social platforms. We are not responsible for the privacy practices of those services and encourage you to review their policies directly.

We may use Google Analytics to understand website usage where consent has been given. Google Analytics data is processed by Google LLC and subject to their privacy terms. We do not sell personal data to any third party.

9. Children's Privacy

Our website and services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18 without the consent of a parent or guardian. If you believe a minor has submitted data to us without appropriate consent, please contact us so we can take appropriate steps.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated date. We encourage you to review this page periodically. Continued use of our website following changes constitutes acceptance of the updated policy.