Privacy Policy

Effective Date: 02 Oct 2025

Hovia home of holistic health is operated by HealthAxis Solutions ("we", "us", "our"). We are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information in compliance with Thailand’s Personal Data Protection Act (PDPA) and the General Data Protection Regulation (GDPR), as well as other applicable laws. This policy applies to all visitors, clients, and patients of our wellness clinic who use our website ("Site").
By accessing and using our Site, you consent to the collection, use, and sharing of your personal data as described in this policy.

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data. It applies to all data subjects (including EU residents) interacting with our website and services.
We process your personal data in compliance with:

Thailand's Personal Data Protection Act (PDPA)
The General Data Protection Regulation (GDPR) if you are in the EU or if your data is processed in the EU.

2. Information We Collect

We collect the following types of personal data:

Personal Identification Information: Name, email address, phone number, physical address.
Health Information: Medical history, treatments, health status (only with explicit consent).
Usage Data: Information about how you interact with our Site, such as IP address, browser type, pages visited, and time spent on the Site.
Payment Information: Credit card or bank account details (only if applicable).

3. How We Collect Your Data

We collect personal data through:

Directly from you: When you register on our Site, make appointments, or contact us through forms.
Automatically: Through cookies and other tracking technologies when you interact with our Site.
Third-Party Services: We may receive personal data from trusted third parties, such as payment processors, health service providers, or marketing partners.

4. How We Use Your Data

We use your personal data for the following purposes:

Providing Services: To schedule appointments, provide treatments, and communicate with you about your health and wellness.
Payment Processing: To process payments for services.
Customer Support: To respond to your inquiries and support requests.
Marketing: To send you promotional emails or newsletters (with your explicit consent).
Legal Compliance: To comply with applicable laws, including medical record-keeping and health regulations.

5. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Consent (GDPR Article 6(1)(a)): For marketing communications and sensitive health-related data processing.
Contractual Necessity (GDPR Article 6(1)(b)): To provide wellness services and fulfill our obligations to you.
Legal Obligation (GDPR Article 6(1)(c)): To comply with Thai and EU health laws and regulations.
Legitimate Interests (GDPR Article 6(1)(f)): For improving our services, business development, and enhancing your user experience.

If we rely on consent to process your personal data, you have the right to withdraw it at any time. If you withdraw consent, it will not affect the legality of processing carried out before the withdrawal.

6. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. We may retain medical records and payment information for a period of time required by local law or industry standards. After this period, your personal data will be securely deleted or anonymized.

7. Sharing Your Data

We may share your personal data with the following categories of recipients:

Service Providers: Third-party vendors who assist us in providing services (e.g., payment processors, IT support, cloud services).
Health Professionals: If necessary for your treatment or care, we may share your data with affiliated health professionals or clinics.
Legal Authorities: To comply with legal obligations, we may share data with government authorities or law enforcement agencies.

We do not sell, rent, or trade your personal data.

8. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption, access controls, and secure servers. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee 100% security.

9. Your Rights

Under both the PDPA and GDPR, you have the following rights regarding your personal data:

Right to Access (GDPR Article 15): You have the right to request a copy of the personal data we hold about you.
Right to Correct (GDPR Article 16): You have the right to request that we correct any inaccurate or incomplete data.
Right to Erasure (GDPR Article 17): You have the right to request the deletion of your personal data in certain circumstances.
Right to Restrict Processing (GDPR Article 18): You can request that we limit the processing of your personal data in certain cases.
Right to Data Portability (GDPR Article 20): You have the right to request your personal data in a structured, commonly used, and machine-readable format.
Right to Object (GDPR Article 21): You can object to processing your personal data for specific purposes, including direct marketing.
Right to Withdraw Consent: If we process your data based on consent, you can withdraw your consent at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe that your rights have been violated.

To exercise any of these rights, please contact us at (+66)85-556-9151.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your user experience and analyze website performance. Cookies are small files stored on your device that help us remember your preferences and improve the functionality of our Site.

Strictly Necessary Cookies: These cookies are essential for the operation of our Site.
Performance Cookies: These cookies help us improve our website by collecting information about how you interact with it.
Functional Cookies: These cookies enable enhanced functionality and personalization of the website.

You can manage cookie settings through your browser settings, but please note that disabling cookies may impact the functionality of our website. For more information on how we use cookies, please see our Cookie Policy.

11. International Data Transfers

If your personal data is transferred outside of Thailand or the European Economic Area (EEA), we will ensure that adequate safeguards are in place to protect your data. This includes using standard contractual clauses or relying on an adequacy decision for transfers to specific countries.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated policy on our website.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
HealthAxis Solutions Co., Ltd.
52/30 Soi Sukhumvit 3
Klong-Toey Nuea, Wattana,
Bangkok 10110, THAILAND
(+66)85-556-9151