Privacy Policy

1. Introduction

Baan Sabai ("we", "us", "our"), located at 89/3 Hang Dong Road, Hang Dong, Chiang Mai 50230, Thailand, is committed to protecting the privacy of residents, their families, and visitors to our website. This Privacy Policy explains how we collect, use, store, and safeguard personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards.

If you have any questions about this policy or how your data is handled, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact forms on our website (name, email address, phone number, message content)
• Enquiry calls and emails to our team
• Residency applications and intake documentation for residents
• Website analytics and cookie data (see Section 5)
• Communications between families and the care team

Data categories we may hold include: names and contact details, health-related preferences (dietary requirements, mobility needs), family contact information, financial information for billing purposes, and website usage data collected through cookies.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries about residency and services
• Managing residential arrangements and daily care
• Communicating with residents' family members and appointed contacts
• Billing and administrative purposes
• Improving our website and understanding how visitors engage with it
• Complying with legal obligations in Thailand

The legal basis for processing is primarily consent (for website enquiries and cookies), legitimate interest (for ongoing residential care operations), and contractual necessity (for residents under a formal residency arrangement).

4. Data Retention

Enquiry data from contact forms is retained for up to 12 months unless a residency arrangement is established. Resident records are retained for the duration of residency and for a period of five years following departure, in compliance with applicable Thai administrative requirements. Website cookie data is retained for periods specified in our Cookie Policy.

5. Cookies

Our website uses cookies to improve the user experience and to understand how visitors engage with our pages. We use essential cookies (required for basic functionality), analytics cookies (to measure page visits and user behaviour), and preference cookies (to remember settings). For full details, please read our Cookie Policy. You can manage your cookie preferences at any time through that page.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• Restricted access to resident files — limited to relevant staff only
• Secure storage of physical records in locked premises
• Password-protected digital systems with access controls
• Staff training on data handling responsibilities

In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities as required by the PDPA within 72 hours of becoming aware of the breach.

7. Third-Party Sharing

We do not sell personal data to third parties. We may share data with third-party service providers who assist with website analytics, email delivery, and administrative software — all under agreements that bind them to appropriate data protection standards. We may also share data with healthcare providers where a resident has consented, and with legal authorities where required by Thai law.

8. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data, where applicable
• Object to the processing of your data based on legitimate interests
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our residential services are intended for adults aged 55 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal information to us, please contact us promptly so we can remove it.

10. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised date at the top of the page will be updated. Continued use of our website or services after any change constitutes acceptance of the updated policy. For significant changes, we will notify residents and their families directly.

12. Contact

For any privacy-related questions, data requests, or concerns, please contact us at: