Privacy Policy

1. Introduction

baanlilxz operates a residential boarding house for elderly individuals at 47/3 Nimman Soi 9, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand. This policy explains what personal information we collect, how we use it, and the rights that individuals have in relation to that information. We take the privacy of residents, their families, and website visitors seriously and handle all personal data with care and discretion.

If you have any questions about this policy, please contact us at [email protected].

2. Information We Collect

We collect personal information in the following circumstances:

Enquiry and contact forms: When you submit an enquiry via our website or contact us by phone or email, we collect your name, email address, and telephone number. We may also hold notes from the conversation relevant to your enquiry.

Resident admission: When a person moves into baanlilxz, we collect details necessary for managing their residence — including full name, date of birth, nationality, dietary requirements, emergency contact details, and documentation relating to the residency agreement.

Family and authorised contacts: With the resident's knowledge and agreement, we hold contact details for family members or designated contacts who may be reached in relevant circumstances.

Website usage data: Our website may collect standard technical data through analytics cookies, including browser type, pages visited, and approximate location. This is described further in our Cookie Policy.

3. How We Use Your Information

We use personal information only for the purposes for which it was provided or where we have a legitimate reason to do so:

• Responding to enquiries and arranging visits to the house
• Managing the day-to-day residence of individuals living at baanlilxz
• Communicating with family members or authorised contacts
• Fulfilling billing and administrative obligations related to residency
• Improving our website and understanding how visitors use it (analytics only)

We do not sell, rent, or share personal information with third parties for marketing purposes. We do not use your information for any purpose unrelated to the services you have enquired about or entered into with us.

4. Legal Basis for Processing

We process personal information on the following legal bases, consistent with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: For enquiry forms and website cookies where consent is requested.
• Contractual necessity: For resident admission data necessary to fulfil the residency agreement.
• Legitimate interests: For reasonable operational communications with families and authorised contacts.
• Legal obligation: Where required by Thai law or regulatory authority.

5. Data Retention

Enquiry data from individuals who do not proceed to residency is retained for up to twelve months and then deleted. Resident admission records are retained for seven years following the end of residency, as required for our administrative and legal obligations under Thai law. Website analytics data is retained in aggregated form and does not contain personally identifiable information beyond thirty days in raw form.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, or disclosure. Physical records are stored securely at our premises. Digital records are held on password-protected systems. Staff with access to resident information are briefed on their confidentiality obligations during induction.

In the event of a data breach that may affect an individual's rights, we will notify affected parties as required by applicable law.

7. Cookies

Our website uses cookies to understand how visitors interact with our pages and to improve the experience for future visitors. You can manage your cookie preferences at any time via our Cookie Policy page, which includes instructions for managing cookies in different browsers.

8. Third-Party Services

Our website may use Google Analytics to understand usage patterns. This service processes data in accordance with Google's own privacy policy. We do not use advertising networks or share data with third-party marketing services. We do not use social media tracking pixels on this website.

9. Your Rights

Under Thailand's PDPA, individuals whose personal data we hold have the following rights:

• The right to be informed about how your data is used
• The right to access the personal data we hold about you
• The right to rectification of inaccurate data
• The right to erasure of your data, subject to our legal retention obligations
• The right to restrict processing in certain circumstances
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with the Thailand Personal Data Protection Committee

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are provided to adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we hold data relating to a minor, please contact us immediately so that we can address the matter appropriately.

11. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently before providing any personal information.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on this page with a revised date. We encourage you to review it periodically. Material changes will be communicated to current residents and their families directly.

13. Contact

For any privacy-related questions or to exercise your rights, please contact: