Privacy notice
Version 2026-10-draft-1 — DRAFT, legal review required
Who we are
[COMPANY LEGAL NAME] ("AEQUA", "we") is a healthcare navigation service based in Thailand. Our registered address is [REGISTERED ADDRESS]. For any privacy matter, contact [PRIVACY CONTACT].
What we collect
Through this website we collect only what the first conversation needs: your name, email address, optional phone/WhatsApp number and country, the situation and short answers you choose to share, your timezone and language, any documents you upload, and records of booked calls. The intake questionnaire asks no diagnostic questions.
Why we use it
To understand your situation, prepare for and hold the first conversation with the Doctor, arrange appropriate next steps, and keep you informed about your enquiry. Health information you choose to share is used only for these purposes.
Consent
Before anything is stored, we ask for your explicit consent to process the health information you share. You may also choose to receive occasional updates from AEQUA; this is optional and separate. You can withdraw consent at any time — withdrawal is recorded, never deleted.
Who receives your data
AEQUA is both the data controller and the data processor for the core system, which runs on our own infrastructure. Two service providers act as processors: our email delivery provider and our backup storage provider. Data is stored in Thailand; no other transfers occur.
How long we keep it
We keep enquiry records for as long as your care relationship may require, until you ask us to delete them, or until a retention policy is finalised with legal review — whichever comes first. (Retention is currently indefinite; this is under review.)
Your rights (PDPA)
You may request a copy of everything we hold about you, ask us to correct it, or ask us to delete it. From the confirmation email's private link you can also add documents at any time. To exercise any right, contact [PRIVACY CONTACT].
How we protect it
All traffic uses HTTPS. Documents are stored in a private storage bucket and can only be opened by signed-in AEQUA staff through the application; every download is logged. The database and file storage are not reachable from the internet.