Last updated: 26 November 2025

This Privacy Policy explains how Asoke Skin Hospital (“we”, “us”, “our”) collects, uses, discloses and protects personal data when you:

• visit our websites, and

• use our Asoke Skin AI Chatbot on LINE, Facebook Messenger, Instagram, or other messaging platforms.

By using our services, you agree to the collection and use of your information in accordance with this Privacy Policy.

Important: The Asoke Skin AI Chatbot is provided for general information only and does not replace consultation with a doctor. Do not use the chatbot in an emergency and do not share information that is more sensitive than necessary.

⸻

1. Who we are

Asoke Skin Hospital

Email: info@asokeskin.com

Phone: 02-246-5111

We are the data controller for personal data processed under this Privacy Policy, except where we act as a processor on behalf of other parties.

⸻

2. What data we collect

2.1 Data you provide directly

When you use our websites or chatbots, you may provide:

• Name and contact details (such as phone number or email)

• Information about your skin condition, symptoms, past treatments or photos you choose to send

• Appointment-related information (preferred branch, date, time, etc.)

• Any other text or content you type into the chatbot or contact forms

Because we are a dermatology hospital, some of this information may be considered sensitive health information.

2.2 Data from messaging platforms

When you use the Asoke Skin AI Chatbot on LINE, Facebook Messenger, Instagram, or similar platforms, we may receive:

• Your user ID on that platform

• Your display name, profile picture (if the platform provides it)

• Your messages and any attachments you send to the chatbot

• Timestamps and technical delivery information

The exact data depends on the platform’s settings and your own privacy choices with that service.

2.3 Technical & usage data

When you visit our websites or use the chatbot, we may collect:

• IP address, browser type, device type, operating system

• Pages visited, time and date of visit, time spent on pages

• Basic analytics and log data used for security, monitoring and service improvement

We may use cookies or similar technologies on our website for these purposes.

⸻

3. How we use your data

We use your personal data to:

1. Provide information and reply to your questions

• Answer general questions about skin conditions, treatments and our hospital

• Provide branch information, opening hours and directions

• Help you contact our staff when needed

2. Support appointment-related requests

• Provide general information about appointments and walk-in policies

• Help direct you to the appropriate branch or contact channel

3. Improve our services and chatbot quality

• Review anonymized or aggregated logs to improve answer accuracy and safety

• Monitor usage patterns and troubleshoot technical issues

4. Security and legal compliance

• Protect against misuse, spam or attacks on our systems

• Comply with legal or regulatory obligations and respond to lawful requests

We do not sell your personal data to third parties.

⸻

4. Use of AI and third-party services

Our AI chatbot uses external cloud services to generate answers, including:

• Microsoft Azure (for hosting, databases, search and AI/“OpenAI” services)

• LINE Corporation (for LINE messaging platform)

• Meta Platforms, Inc. (for Facebook Messenger and Instagram messaging)

• Other IT providers that help us operate our systems (hosting, logging, monitoring, backup, etc.)

These providers process your messages and related data on our behalf in order to deliver the chatbot and related services. We require them to protect your data and use it only according to our instructions and applicable laws.

⸻

5. Legal basis for processing

Depending on your location and applicable law (for example, Thai PDPA and/or GDPR-style regulations), we may process your data based on:

• Your consent, when you choose to send us information via website or chatbot

• Contractual necessity, when we respond to your requests regarding our medical services

• Legitimate interests, such as improving our services, ensuring security and preventing abuse

• Legal obligations, when we must retain or disclose data under applicable law

You may withdraw your consent at any time by stopping use of the chatbot and contacting us using the details in Section 11.

⸻

6. Data retention

We keep your personal data only for as long as necessary to:

• fulfil the purposes described in this policy, and

• comply with legal, regulatory, tax or accounting requirements.

Chat logs and technical logs may be retained for a limited period for security, troubleshooting and service improvement, then deleted or anonymized.

⸻

7. Data sharing and international transfers

We may share your data with:

• Our doctors, nurses and authorized staff, where necessary to respond to your requests

• Our IT and cloud service providers (such as Microsoft Azure, LINE and Meta)

• Professional advisers (lawyers, auditors) where necessary

• Authorities or regulators where required by law or to protect our rights, safety or property

Because some of our service providers are located outside Thailand, your data may be processed in other countries. We take reasonable steps to ensure appropriate safeguards are in place for such transfers.

⸻

8. Your rights

Depending on your local law, you may have rights such as:

• Right to access your personal data

• Right to correct inaccurate or incomplete data

• Right to request deletion or anonymization of your data

• Right to object to or restrict certain processing

• Right to withdraw consent (where processing is based on consent)

• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the details in Section 11. We may need to verify your identity before fulfilling your request.

⸻

9. Children

Our websites and chatbots are intended for use by adults. We do not knowingly collect personal data from children without appropriate parental or guardian consent, as required by law. If you believe a child has provided us with personal data without such consent, please contact us so we can take appropriate action.

⸻

10. Security

We implement reasonable technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

We recommend that you avoid sending passport numbers, credit-card information or other unnecessary sensitive identifiers in free-text chat messages.

⸻

11. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Asoke Skin Hospital

Email: info@asokeskin.com

Phone: 02-246-5111

⸻

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page regularly.