Privacy policy
We collect as little as possible: only your email address, and only if you choose to give it to us.
Who is responsible for your data
This website is published by [Company name: TODO] ("we", "us"), which is the data controller for the personal data described here. You can contact us at hello@example.com.
This policy is written to meet Thailand's Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR) and the UK GDPR, where they apply.
What we collect
- Your email address and your consent, if you sign up for email updates. You give us these through a form on our site.
- That is all. We do not ask for your name, your health information or details about anyone's treatment, and we ask you not to send us health information by email.
Why we collect it, and our legal basis
We use your email address only to send you the updates you signed up for: changes to our checklist and guides, and to the rules they cover. Our legal basis is your consent (PDPA section 19; GDPR Article 6(1)(a)). You can withdraw your consent at any time, and it is as easy to withdraw as it was to give: use the unsubscribe link in any email or write to us.
Who else handles your data
Our website is hosted by Cloudflare, Inc. (Cloudflare Workers), and sign-ups are stored in Cloudflare Workers KV on our behalf. Cloudflare may process this data outside Thailand, the UK or the EU (for example, in the United States). By submitting the form and ticking the consent box, you agree to this transfer. We do not sell, rent or share your email address with treatment centers, advertisers or anyone else.
Cookies, analytics and tracking
- We do not use tracking pixels or advertising cookies (for example, from Meta, TikTok or Google Ads).
- We do not currently use any analytics tools.
- Our own pages do not set cookies. Our host may keep standard technical server logs (such as IP addresses) for security and reliability.
If we ever add analytics, we will choose a privacy-friendly option, update this policy first, and ask for your consent where the law requires it.
How long we keep it
We keep your email address until you unsubscribe or ask us to delete it. We then delete it from our form records within 30 days.
Your rights
Depending on where you live, you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or delete it;
- object to or restrict how we use it;
- receive it in a portable format;
- withdraw your consent at any time;
- complain to a data protection authority, such as Thailand's Personal Data Protection Committee (PDPC), the UK Information Commissioner's Office (ICO) or the authority in your EU country.
To use any of these rights, email hello@example.com. We will reply within 30 days.
Security
Our site is served over HTTPS. Access to form submissions is limited to the people who need it to send the updates.
Children
Our email sign-up is intended for adults. If you are under 18 and need support, please talk to a trusted adult or see our crisis help page.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how we use your email address, we will tell you before it takes effect.