Privacy Policy

1. Introduction

Sirin is committed to protecting the privacy and personal information of all individuals who interact with our senior living community. This Privacy Policy explains how we collect, use, protect, and share personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and international best practices. We understand that choosing a residential care arrangement involves sharing sensitive information, and we take our responsibility to safeguard that information seriously.

This policy applies to all visitors, prospective residents, current residents, family members, and any other individuals who provide personal information to Sirin through our website, during orientation visits, or as part of the residency process.

2. Data Collection

2.1 Information We Collect

We collect personal information necessary to provide our services and maintain a safe, supportive community environment. This includes:

• Contact Information: Name, email address, phone number, and mailing address
• Demographic Information: Age, date of birth, gender, and nationality
• Health Information: Medical history, current health conditions, medications, dietary restrictions, and mobility needs (collected with explicit consent for care purposes)
• Family and Emergency Contacts: Names and contact details of family members and designated emergency contacts
• Financial Information: Payment details for residency fees (processed securely through third-party payment providers)
• Website Usage Data: IP address, browser type, pages visited, and time spent on site (collected through cookies)

2.2 How We Collect Information

Personal data is collected through:

• Contact forms submitted on our website
• Orientation visit registration and attendance
• Residency application and enrollment forms
• Direct communication with staff (phone, email, in-person)
• Ongoing care assessments and family consultations
• Cookies and analytics tools on our website

3. Legal Basis and Data Usage

3.1 Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: You provide explicit consent when submitting forms or agreeing to receive communications
• Contract: Processing is necessary to fulfill residency agreements and provide care services
• Legitimate Interest: We have a legitimate interest in improving our services and maintaining community safety
• Legal Obligation: We may process data to comply with healthcare regulations and legal requirements

3.2 How We Use Your Information

Personal data is used for the following purposes:

• Responding to inquiries and scheduling orientation visits
• Processing residency applications and enrollment
• Providing personalized care and support to residents
• Communicating with family members regarding resident well-being
• Coordinating with healthcare providers for medical care
• Processing payments and managing financial accounts
• Sending updates, newsletters, and community event information (with consent)
• Analyzing website usage to improve user experience
• Complying with legal and regulatory requirements

3.3 Data Retention

We retain personal data for the following periods:

• Inquiry Data: Up to 2 years after the last contact
• Resident Records: 7 years after residency ends, as required by healthcare regulations
• Financial Records: 7 years from the date of the last transaction
• Marketing Consent: Until consent is withdrawn or 3 years of inactivity

4. Data Sharing and Third Parties

Sirin does not sell or rent personal information to third parties. We may share data with the following entities when necessary:

• Healthcare Providers: Local doctors, hospitals, and specialists for medical care coordination
• Payment Processors: Secure third-party services that handle financial transactions
• Service Providers: Companies that assist with website hosting, email communications, and analytics (bound by confidentiality agreements)
• Legal Authorities: When required by law or to protect the safety and rights of residents and staff
• Family Members: Authorized family contacts receive updates on resident well-being as agreed in care plans

All third parties are required to maintain the confidentiality and security of personal data and use it only for the purposes for which it was shared.

5. Data Protection Measures

We implement comprehensive security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Sensitive data is encrypted both in transit and at rest
• Access Controls: Only authorized staff members have access to personal information, based on their role and need
• Secure Storage: Physical and digital records are stored in secure, access-controlled environments
• Regular Audits: Security practices are reviewed and updated regularly
• Staff Training: All employees receive training on data protection and confidentiality
• Breach Notification: In the event of a data breach, affected individuals and relevant authorities will be notified promptly as required by law

6. Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. For detailed information on how we use cookies, please refer to our Cookie Policy.

In summary, we use:

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Track site usage to improve user experience (optional, can be disabled)
• Marketing Cookies: Support advertising and outreach (optional, can be disabled)

7. Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Request transfer of your data to another service provider in a structured format
• Right to Object: Object to the processing of your personal data for certain purposes
• Right to Withdraw Consent: Withdraw previously given consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee or relevant supervisory authority

To exercise any of these rights, please contact us at privacy@sirinuss or call +66 53 275 813. We will respond to your request within 30 days.

8. Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify affected individuals via email or through a notice on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

We encourage you to review this policy periodically to stay informed about how we protect your personal information.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: