Legal

Privacy Policy

Version 1.0 · Effective 3 September 2026 · Applies to the TRT Thailand mobile app and trtthailand.com

1. Who is responsible

Data controller: STATE OF THE ART MEDICAL CO., LTD. (juristic person registration no. 0205568023083), 389/203 Moo 12, Nongprue, Bang Lamung, Chonburi 20150, Thailand — operator of TRT Bangkok Clinic (MOPH establishment licence no. 20101004269). Contact: info@trtbangkok.com.

2. What we collect

• Contact & account data: name, e-mail address, phone number, delivery address, preferred language.
• Health data (special category): laboratory results and biomarker values, weight entries, medication protocol and dose, injection schedule, appointment history, documents you upload (previous lab reports), and documents issued to you (prescription confirmations, travel certificates, doctor's reports).
• Technical data: device type and OS version, app version, anonymised usage events (e.g. "booking started"), and crash reports. We do not collect your precise location: if you allow location access, it is used only on your device to sort nearby labs and never leaves your phone.

3. Why we process it (legal bases)

• To provide your care companion — showing your results, bookings, reminders and documents: performance of the healthcare relationship and your explicit consent to processing health data (PDPA s. 26; GDPR Art. 9(2)(a), (h)).
• To operate and secure the service — sign-in, error diagnosis, abuse prevention: legitimate interest and legal obligation.
• To communicate with you — service notifications about results, bookings and deliveries. No marketing without separate consent.

4. Where your data lives

App data is stored with our hosting processor Supabase (infrastructure: Amazon Web Services, region Singapore, ap-southeast-1) under a data processing agreement. Crash diagnostics are processed by Sentry. If you contact us on WhatsApp, WhatsApp's own terms apply to that conversation. We never sell personal data, we run no third-party advertising, and we do not use your data to track you across other companies' apps or websites.

5. How long we keep it

App account data is kept while your account exists. If you delete your account (Profile → Delete account), your app data — profile, results, documents, files — is permanently erased. Independent of the app, the clinic retains medical records it is legally required to keep under Thai healthcare law for the statutory retention period; those records are managed by the clinic under the PDPA.

6. Your rights

Under Thailand's Personal Data Protection Act (PDPA) — and, where it applies, the EU GDPR — you can: access your data (the app's doctor's-report export gives you a copy anytime), correct it, delete it (in-app account deletion), withdraw consent, object to processing, and lodge a complaint with the Personal Data Protection Committee (Thailand) or your local supervisory authority. Requests: info@trtbangkok.com — we respond within 30 days.

7. Age

The app is intended for adults (18+). We do not knowingly process data of minors.

8. Changes

We will announce material changes in the app and update the version and date at the top of this page.