Privacy Policy

Introduction

candalesa is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our services, visit our facilities, or use our website.

If you have questions about this policy or how we handle your information, please contact us at [email protected].

Information We Collect

Personal Information

We collect personal information when you:

• Submit inquiries through our website contact form
• Call or email us with questions
• Visit our facilities for tours or consultations
• Enroll in our care services
• Participate in family communications and updates

Types of Data Collected

• Contact Information: Name, email address, phone number, mailing address
• Care-Related Information: Health considerations, care preferences, family contact details (for enrolled residents only)
• Website Usage Data: IP address, browser type, pages visited, time spent on pages (collected via cookies)
• Communication Records: Correspondence via email, phone, or in-person meetings

How We Collect Information

• Directly from you through forms, calls, and consultations
• Automatically through website cookies and analytics
• From family members or legal representatives (with proper authorization)

How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Providing care services, managing resident wellbeing, coordinating daily activities
• Communication: Responding to inquiries, scheduling visits, providing family updates
• Improvement: Enhancing our services, facilities, and website experience
• Legal Compliance: Meeting regulatory requirements and protecting rights
• Safety and Security: Ensuring resident safety and facility security

Legal Basis for Processing

Under Thailand's Personal Data Protection Act (PDPA), we process your data based on:

• Consent: You have given clear permission for specific processing
• Contractual Necessity: Processing is necessary to fulfill care service agreements
• Legitimate Interest: Processing is necessary for our operational needs while respecting your rights
• Legal Obligation: Processing is required by Thai law or regulations

Data Sharing and Third Parties

We do not sell your personal information. We may share data with:

• Healthcare Providers: Local clinics and medical professionals (only with consent and as necessary for care)
• Service Providers: Housekeeping, meal preparation, facility maintenance companies (under strict confidentiality agreements)
• Legal Authorities: When required by law or to protect rights and safety
• Family Members: Authorized family contacts as specified in care agreements

All third parties are required to maintain confidentiality and use information only for specified purposes.

Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Physical Security: Secure facilities with controlled access and monitoring
• Digital Security: Encrypted data storage, secure servers, regular security audits
• Access Controls: Limited staff access on a need-to-know basis
• Staff Training: Regular privacy and confidentiality training for all employees
• Breach Procedures: Protocols for detecting, reporting, and responding to data breaches

Data Retention

We retain personal information for different periods based on the type of data and purpose:

• Inquiry Data: 2 years from last contact
• Resident Care Records: 7 years after service conclusion (as required by Thai regulations)
• Website Analytics: 26 months from collection
• Financial Records: As required by Thai tax and accounting laws

After retention periods expire, data is securely deleted or anonymized.

Cookies and Website Analytics

Our website uses cookies to improve user experience and understand site usage. We use:

• Essential Cookies: Necessary for basic website functionality
• Analytics Cookies: To understand how visitors use our site (with your consent)

For detailed information about cookies and how to manage them, please see our Cookie Policy.

Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Children's Privacy

Our services are designed for adults aged 18 and over. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected data from someone under 18, we will delete it promptly.

International Data Transfers

Your data is primarily stored and processed in Thailand. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Thai data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email (if you have provided contact information) or by posting a notice on our website. The "Last Updated" date at the top of this policy indicates when changes were last made.

Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact: