Privacy Policy

This website (dentopia.co.th) and the processing of the personal data it collects are operated by SmilesoftSystems (Thailand) Co., Ltd., 988/172 Ram Inthra Road, Khan Na Yao, Khan Na Yao, Bangkok 10230, Thailand. Company registration number (DBD): 0845567009324. Represented by Styve Servant.

The clinic promoted by this website is Dentopia Dentelligence Clinic, 1/29 Dentopia Building, Phetkasem Road, Wat Tha Phra, Bangkok Yai, Bangkok 10600, Thailand.

For any question about your personal data, or to exercise your rights, please contact dentopia.bangkok@gmail.com.

This policy is established in accordance with the Thai Personal Data Protection Act, B.E. 2562 (PDPA).

We collect only the data you provide to us voluntarily, together with the minimal technical data needed for the website to function.

Data you provide, through the appointment request form: your name, your telephone number, your email address, your LINE ID if you choose to share it, your preferred time slots, and the message you write.

Technical data, collected automatically: strictly necessary browsing data (language preference and session).

We do not collect health data through this website. Any medical information about you is collected, where relevant, directly at the clinic as part of your care, and does not pass through this form.

Your data is used solely to handle your appointment request and contact you about it, to answer your questions, and to ensure the technical operation and security of the website.

We do not use your data for marketing without your consent, and we do not sell or rent it to third parties.

The legal basis is your consent, given by ticking the box provided before sending the form, together with our legitimate interest in operating the website.

To operate, this website relies on technical service providers whose servers may be located outside Thailand. Your data may therefore be transferred to and stored abroad. These providers are: Vercel Inc. (website hosting), Supabase Inc. (database of appointment requests), Cloudflare Inc. (video delivery), and Resend (sending notification emails to the clinic).

These transfers are carried out in accordance with Section 28 of the PDPA. Each of these providers applies recognised data protection measures. By using this website and submitting the form, you are informed of this transfer and consent to it.

We keep appointment requests and the associated data for twelve (12) months from our last contact with you, after which we delete them. If your request does not lead to an appointment, it is deleted at the end of that same period.

Consent records are kept for as long as necessary to demonstrate that consent was obtained, in accordance with applicable regulations.

This website uses only the cookies needed for it to function. They are essential, they are never used to track you, and we use no analytics or advertising cookies of any kind.

We set two cookies. "NEXT_LOCALE" remembers whether you are reading the site in Thai or in English; it lasts for your browsing session. "dentopia_patient" is created only if you sign in to the patient area, is readable by our server alone, and expires after thirty (30) minutes of inactivity.

Some pages can load content provided by third parties: a location map on the Contact page, and videos hosted by Cloudflare on the Advice page. This content is loaded only after you click to open it. Nothing is requested from those third parties, and no cookie of theirs is set, until you do. Once loaded, that content may set its own cookies, subject to the privacy policies of those third parties.

In accordance with the PDPA, you have at any time the following rights: the right of access, the right to rectification, the right to erasure, the right to withdraw consent, the right to object to and to restrict processing, and the right to data portability.

To exercise any of these rights, contact dentopia.bangkok@gmail.com. We will respond within the time limits set by law. You also have the right to lodge a complaint with the Thai Personal Data Protection Committee (PDPC).

We put in place reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Data travels over encrypted connections, and access to appointment requests is restricted to authorised persons.

We may update this policy to reflect legal or technical changes. The date of the last update appears at the top of this document. In the event of a significant change, we will inform users by an appropriate means.