Privacy Policy

Introduction

Dewfall is committed to protecting the privacy and personal information of residents, their families, and visitors. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Personal Data Protection Act (PDPA) of Thailand and other applicable data protection laws.

This policy applies to all personal information collected through our website, in-person visits, telephone communications, and during the residency application and care process.

Information We Collect

Personal Information

We collect the following types of personal information:

• Contact details: name, address, telephone number, email address
• Demographic information: age, date of birth, nationality
• Health information: medical history, current health conditions, mobility requirements, dietary needs, medication requirements (collected only with consent for residents and prospective residents)
• Emergency contact information: names and contact details of family members or designated contacts
• Financial information: payment details for residency fees (processed through secure payment systems)
• Communication records: correspondence, inquiries, and visit notes

How Information is Collected

Information is collected through:

• Website contact forms and inquiry submissions
• Telephone and email communications
• In-person visits and consultations
• Residency application forms and assessment processes
• Ongoing care documentation and resident records
• Website cookies and analytics (see our Cookie Policy for details)

How We Use Your Information

Personal information is used for the following purposes:

• Service Delivery: To provide residency services, daily care support, meals, and activities as specified in residency agreements
• Communication: To respond to inquiries, arrange visits, provide updates to families, and communicate about residency matters
• Health and Safety: To assess suitability for residency, monitor well-being, coordinate with healthcare providers when necessary, and ensure a safe environment
• Administration: To process payments, maintain resident records, manage staffing, and fulfill legal and contractual obligations
• Improvement: To analyze service quality, identify areas for improvement, and enhance the residency experience
• Legal Compliance: To comply with Thai laws and regulations regarding elderly care, data protection, and business operations

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: We obtain explicit consent for collecting and processing sensitive health information
• Contractual Necessity: Processing is necessary to fulfill residency agreements and provide care services
• Legitimate Interest: We have legitimate interests in maintaining resident safety, improving services, and operating our facility effectively
• Legal Obligation: We process data to comply with Thai laws and regulatory requirements

Data Sharing and Disclosure

We do not sell, rent, or trade personal information. We may share data with:

• Healthcare Providers: Medical professionals or facilities when coordinating care (with consent)
• Emergency Services: Emergency responders when necessary for resident safety
• Family Members: Designated emergency contacts and family members regarding resident well-being
• Service Providers: Third-party vendors who assist with payment processing, website hosting, or facility maintenance (under strict confidentiality agreements)
• Legal Authorities: Law enforcement or regulatory bodies when required by law

All third parties are required to protect personal data and use it only for the specified purposes.

Data Security

We implement appropriate security measures to protect personal information:

• Physical security: Locked filing cabinets for paper records, restricted access to offices
• Digital security: Password protection, encryption for sensitive data, secure servers
• Access controls: Only authorized staff have access to personal information based on their role
• Staff training: All staff receive training on data protection and confidentiality
• Regular reviews: We periodically review and update security practices

While we take reasonable precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protective measures.

Data Retention

Personal information is retained for the following periods:

• Inquiry Data: Information from initial inquiries is retained for 2 years unless a residency agreement is established
• Resident Records: Active resident records are maintained throughout residency and for 7 years following departure to comply with legal requirements
• Financial Records: Payment and financial information is retained for 10 years as required by Thai accounting and tax laws
• Health Information: Medical records are retained for 10 years following residency end

After retention periods expire, data is securely destroyed through shredding (paper) or permanent deletion (digital).

Your Rights

Under Thai data protection laws, you have the following rights:

• Right to Access: Request copies of personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of personal data in certain circumstances
• Right to Restriction: Request limitation on how we process your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time (though this may affect service delivery)

To exercise these rights, please contact us at [email protected] or +66 74 328 561. We will respond to requests within 30 days.

Cookies and Website Analytics

Our website uses cookies to improve user experience and analyze site traffic. Cookies are small text files stored on your device. We use:

• Essential Cookies: Necessary for basic website functionality
• Analytics Cookies: Help us understand how visitors use our website (with consent)

For detailed information about our cookie practices and how to manage preferences, please see our Cookie Policy.

Children's Privacy

Our services are designed for elderly individuals and their families. We do not knowingly collect personal information from individuals under 18 years of age, except as emergency contact information provided by adult family members. If we become aware of having inadvertently collected data from a minor, we will delete it promptly.

International Data Transfers

Personal data is stored and processed in Thailand. We do not routinely transfer data internationally. In the rare event that international transfer is necessary (such as using cloud services with international servers), we ensure adequate safeguards are in place to protect your information in accordance with Thai data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. Significant changes will be communicated through our website and, where appropriate, directly to residents and families. The "Last Updated" date at the top of this policy indicates when the most recent revision occurred. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

If you have concerns about how we handle your personal data and are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.