Privacy Policy

Last updated: [September 2026]

At Viva Rehab Thailand (“Viva Rehab,” “we,” “our,” or “us”), your privacy matters to us. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit vivarehabthailand.com, contact us, or use our services.

Because we are a healthcare provider, some of the information you share with us, or that we can infer from the pages you visit, relates to your health. We treat this information with extra care, as explained below.

We handle personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA), the EU and UK General Data Protection Regulation (GDPR), applicable United States state privacy laws, the Australian Privacy Act 1988, and other privacy laws that apply to you. Where these laws differ, we apply the standard that gives you the most protection.

1. Who We Are

Data Controller: Viva Rehab Thailand, part of The Dawn Group

Address: 59/2-3 Khua Mung, Saraphi District, Chiang Mai 50140, Thailand

Legal entity and registration number: TDGC company limited, registration number 0525567001628

As the data controller, we decide how and why personal data is processed on this website and in our admissions process.

2. What Information We Collect

a. Information you provide to us

When you contact us through our website forms, by phone, email, WhatsApp or other messaging, or request a free confidential assessment, we collect the information you choose to share, typically:

  • Name, email address, phone number and country of residence
  • The content of your message or inquiry
  • Information about your health, substance use, mental health, medications or treatment history, when you choose to tell us
  • Details of a family member or friend, if you are inquiring on someone else’s behalf
  • Travel, passport and insurance details needed to arrange admission, if you go on to book treatment

b. Information we collect automatically

When you browse our website, we and our service providers collect technical and usage data through cookies and similar technologies, subject to your cookie preferences:

  • IP address and approximate location (country or city level)
  • Device type, operating system, browser type and language
  • Pages viewed, time on page, clicks, scrolling and the site you came from
  • Advertising identifiers and campaign parameters (for example, Google click IDs and UTM tags)
  • Call data when you phone one of our tracked numbers: your phone number, call time and duration, and the campaign that led you to call

Please note that the pages you view on our site (for example, pages about a specific addiction or mental health condition) may reveal information about your health. We only use this data for the purposes you consent to in our cookie banner.

c. Information from other sources

We may receive limited information from advertising platforms (such as which ad you clicked), from call-tracking providers, or from a family member, referring professional or insurer who contacts us on your behalf.

3. How We Use Your Information

We use personal data to:

  • Respond to your inquiries and provide the information you request
  • Carry out a confidential assessment and advise on suitable treatment options
  • Arrange admission, travel, visas and airport transfers, if you decide to come to Viva Rehab
  • Measure and improve our website, content and marketing campaigns
  • Show you relevant advertising on other websites and platforms, and measure whether our advertising works (only with your consent)
  • Send you information about our services if you have asked to receive it
  • Keep our website secure and prevent fraud or abuse
  • Meet our legal, regulatory and licensing obligations

We do not sell your personal information. We do not share your health information with advertising platforms.

4. Legal Basis for Processing

Depending on where you are located, we rely on one or more of the following legal grounds:

  • Consent: when you accept analytics or marketing cookies, or ask us to send you information.
  • Explicit consent for health data: any information about your health, substance use or mental health is only processed with your explicit consent, or where necessary to provide you with care. You can withdraw consent at any time.
  • Contract: when processing is needed to arrange or deliver treatment you have requested.
  • Legitimate interests: for website security, essential functionality, and basic service improvement, where this does not override your rights.
  • Legal obligation: when we are required to keep records or share information under Thai healthcare, licensing or other applicable laws.

5. Cookies, Analytics and Advertising Tools

We manage cookie consent through Borlabs Cookie. When you first visit our site, you can accept all cookies, reject non-essential cookies, or choose individual categories. Only essential cookies are set before you make a choice.

We use cookies in four categories:

  • Essential: required for the website and consent tool to work. These cannot be switched off.
  • Statistics: help us understand how visitors use the site so we can improve it.
  • Marketing: used to show you relevant ads on other platforms and measure our campaigns.
  • External media: third-party content such as embedded maps and videos.

The tools we currently use include:

Tool / provider

What it does

Category

Borlabs Cookie

Records and stores your cookie preferences

Essential

Google Tag Manager

Loads other tags according to your consent choices; does not collect personal data itself

Essential

Google Analytics 4

Website usage statistics (IP addresses are not stored)

Statistics

Google Ads

Conversion measurement and remarketing

Marketing

Nimbata

Assigns tracking phone numbers to visitors and records call details

Marketing

Quora

Conversion measurement and remarketing

Marketing

Microsoft Clarity

Heatmaps and anonymized session recordings

Statistics

Google Maps

Displays our location on an interactive map

External media

 

We use Google Consent Mode so that Google tags respect your choices. If you decline marketing cookies, Google Ads and Analytics operate in a limited, cookieless mode and no advertising identifiers are stored.

You can change or withdraw your consent at any time by clicking “Cookie Settings” in the footer of our website. We keep a record of your consent choices for 18 months to demonstrate compliance, as required by law. A full, automatically updated list of cookies is shown in the cookie settings panel.

You can also opt out of Google Analytics using the Google Analytics opt-out browser add-on, and manage ad personalization through your Google, Meta and device settings. Learn more: policies.google.com/privacy and facebook.com/privacy/policy.

6. Who We Share Your Information With

We only share personal data with people and organizations that need it to help us provide our services, and only to the extent necessary:

  • The Dawn Group: our parent group and affiliated clinical team, who share admissions and clinical systems with Viva Rehab.
  • Clinical and admissions staff: bound by professional and contractual confidentiality.
  • Service providers: website hosting, CRM, email, secure messaging, call handling and IT support providers who process data on our instructions.
  • Analytics and advertising platforms: as described in Section 5, subject to your consent.
  • Travel and visa partners: to arrange flights, transfers and visas when you book treatment.
  • Insurers or referring professionals: only with your permission.
  • Regulators and authorities: where required by law, including Thailand’s Ministry of Public Health.

We require all service providers to protect your data through written agreements and to use it only for the purposes we specify.

7. International Data Transfers

We are based in Thailand and welcome clients from around the world, so your data may be transferred to and processed in Thailand and in the countries where our service providers operate, including the United States, the European Union and the United Kingdom.

Thailand is not currently covered by an EU or UK adequacy decision. When we transfer data from the EU, UK or other countries with transfer restrictions, we use appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Agreement, or providers certified under the EU–US Data Privacy Framework. Transfers out of Thailand are made in accordance with the PDPA.

8. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described in this policy:

Type of data

Retention period

Website inquiries that do not lead to admission

Up to 18 months after our last contact with you

Marketing communications

Until you unsubscribe or withdraw consent

Cookie consent records

[18 months], then deleted

Analytics data

[18 months] (Google Analytics setting)

Call recordings, if any

[18 months]

Assessment and clinical records

As required by Thai healthcare regulations — [insert period, confirm with counsel]

 

After these periods, data is securely deleted or anonymized.

9. Your Privacy Rights

Wherever you are, you have the right to:

  • Access the personal information we hold about you
  • Ask us to correct information that is inaccurate or incomplete
  • Ask us to delete your information
  • Withdraw consent at any time, including for cookies and marketing
  • Object to, or ask us to restrict, certain processing
  • Receive a copy of your data in a portable format
  • Complain to a privacy regulator

To exercise any of these rights, call us on +66 60 003 5316. We may need to verify your identity before responding. We aim to respond within 30 days and will not treat you differently for exercising your rights.

Thailand

You may exercise the rights above under the PDPA and may lodge a complaint with the Personal Data Protection Committee (PDPC).

European Union and United Kingdom

You may exercise the rights above under the GDPR or UK GDPR and complain to your national data protection authority or the UK Information Commissioner’s Office (ICO).

United States

Depending on your state, you may have the right to know, delete or correct your personal information, and to opt out of “sale,” “sharing,” or targeted advertising. We do not sell personal information. Our use of marketing cookies may be considered “sharing” under some state laws. To opt out, click “Do Not Sell or Share My Personal Information” in our website footer, or reject marketing cookies in the cookie banner. We honor Global Privacy Control (GPC) browser signals as an opt-out request.

Australia

You may request access to and correction of your personal information under the Australian Privacy Principles, and you may complain to the Office of the Australian Information Commissioner (OAIC).

10. Inquiring on Behalf of Someone Else

Many people contact us about a family member or friend. If you give us information about another person, please make sure you are entitled to do so and that they are aware of this policy where possible. We will handle their information with the same care as your own.

11. Children

Our website and services are intended for adults. We do not knowingly collect personal information from anyone under 18 (or under 20, where Thai law requires parental consent). If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. Data Security

We protect your personal information with appropriate technical and organizational measures, including encrypted connections (HTTPS), access controls, staff confidentiality obligations and secure storage of clinical records. If a data breach occurs that is likely to affect your rights, we will notify you and the relevant regulator as required by law.

No online system is completely secure. Please avoid sending highly sensitive information by standard email if you can use our secure contact form or phone instead.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or the law. The “Last updated” date at the top shows when it was last revised. Significant changes will be highlighted on our website.

14. Contact Us

For any privacy or cookie-related questions, or to exercise your rights, please contact:

Viva Rehab Thailand

59/2-3 Khua Mung, Saraphi District, Chiang Mai 50140, Thailand

Phone number: +66 60 003 5316

Website: vivarehabthailand.com