Privacy Policy

Last Updated: January 15, 2026

1. Introduction

softvalesa is committed to protecting the privacy and personal information of our residents, their families, and all visitors to our website. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA).

If you have questions about this policy or how we handle your information, please contact us at [email protected].

2. Data Collection Information

We collect personal information when you interact with our services or website. The types of data we collect include:

  • Contact information: name, email address, phone number, postal address
  • Resident information: health details, personal preferences, emergency contacts
  • Family member information: names, contact details, relationship to resident
  • Website usage data: IP address, browser type, pages visited, time spent on site
  • Communication records: emails, phone calls, correspondence with our staff

Legal Basis for Processing: We process your data based on consent, contractual necessity for providing care services, legitimate business interests, and compliance with legal obligations.

Data Retention: Personal information related to care services is retained for seven years after the end of service provision. Website data is retained for two years. Records may be kept longer when required by law.

3. How We Use Your Data

We use the personal information we collect for the following purposes:

  • Providing residential care and support services to residents
  • Communicating with residents and their families about care, activities, and well-being
  • Processing inquiries and responding to questions about our services
  • Sending monthly care summaries and updates to families
  • Improving our website and services based on user feedback and behavior
  • Complying with legal and regulatory requirements
  • Maintaining records for quality assurance and safety purposes

Marketing Communications: We may send you information about our services if you have opted in to receive such communications. You can withdraw consent at any time by contacting us or using the unsubscribe link in our emails.

Data Sharing: We do not sell your personal information. We may share data with healthcare providers (with consent), legal authorities (when required by law), and trusted service providers who assist with our operations (under strict confidentiality agreements).

4. Data Protection Measures

We implement appropriate technical and organizational measures to protect your personal information:

  • Secure servers with encryption for data transmission and storage
  • Access controls limiting staff access to personal information on a need-to-know basis
  • Regular staff training on data protection and confidentiality
  • Secure physical storage of paper records in locked facilities
  • Regular security audits and updates to our systems
  • Incident response procedures for data breaches

Data Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by law.

5. Cookies and Website Analytics

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. We use the following types of cookies:

  • Essential Cookies: Necessary for website functionality, cannot be disabled
  • Analytics Cookies: Help us understand how visitors use our site (optional)
  • Preference Cookies: Remember your settings and choices (optional)

You can manage your cookie preferences through our Cookie Policy page or your browser settings. For more detailed information, please see our Cookie Policy.

6. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data in certain circumstances
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing at any time
  • Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee (Thailand)

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18, we will delete it promptly.

9. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email (if we have your email address) or by posting a notice on our website.

Continued use of our services after changes are posted constitutes acceptance of the updated policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Controller: softvalesa

Email: [email protected]

Phone: +66 53 216 748

Address: 112/6 Nimmanhemin Road, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand