This Privacy Policy explains how ChiangMaiDental.com ("we", "us", "our") collects, uses, and protects information about visitors to chiangmaidental.com. We are committed to handling your data responsibly and transparently, in line with the EU General Data Protection Regulation (GDPR) and Thailand's Personal Data Protection Act (PDPA).
ChiangMaiDental.com is an independent dental clinic directory and information resource. We do not provide dental treatment, process payments, or operate user accounts.
1. What Data We Collect
1.1 Enquiry Form Data
When you submit an enquiry via our contact or booking request forms, we collect:
- Your name
- Your email address
- The dental clinic or treatment you are asking about
- Any additional information you choose to include in your message
Form submissions are processed by Formspree (a third-party form service) and delivered to our team by email. We do not store form data on our own servers.
1.2 Analytics Data
We use Google Analytics 4 (GA4) to understand how visitors use our site. GA4 collects anonymised information such as:
- Pages visited and time spent on each page
- General geographic region (country or city level)
- Device type and browser
- How you arrived at the site (e.g. search engine, direct link)
We have configured GA4 with IP anonymisation enabled. We do not use GA4 data to identify individual visitors.
1.3 Cookies
Our site uses a small number of cookies, primarily set by Google Analytics. No advertising or behavioural tracking cookies are used. For full details, please see our Cookie Policy.
1.4 Data We Do Not Collect
We do not collect payment information, health or medical records, government identification, or any special-category personal data.
2. How We Use Your Data
We use the information we collect for the following purposes:
- Responding to enquiries: to reply to questions submitted via our contact form and, where relevant, to forward your enquiry to the dental clinic you asked about.
- Improving the site: to understand which content and clinics are most useful to visitors, so we can maintain and improve the directory.
- Ensuring security: to monitor for unusual activity that could indicate abuse of our contact forms.
We do not use your data for automated decision-making, profiling, or targeted advertising.
3. Legal Basis for Processing
Where GDPR applies (for visitors from the European Economic Area), we process personal data on the following legal grounds:
- Legitimate interests (Article 6(1)(f)): for analytics and site improvement, where our interest in understanding usage does not override your privacy rights.
- Performance of a contract / pre-contractual steps (Article 6(1)(b)): when responding to an enquiry you have voluntarily submitted.
- Consent (Article 6(1)(a)): for cookies where required — you may withdraw consent by adjusting your browser settings at any time.
4. Third-Party Services
We share data only with the third-party services listed below, strictly as necessary to operate the site. We do not sell personal data to any third party.
Formspree
Our enquiry forms are powered by Formspree, Inc. When you submit a form, your data is transmitted to Formspree's servers and forwarded to us by email. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.
Google Analytics
We use Google Analytics 4 to collect anonymised usage statistics. Google may process data on servers outside the EEA. Google's privacy policy is available at policies.google.com/privacy. You can opt out of GA tracking via the Google Analytics Opt-out Browser Add-on.
Google Fonts
This site loads fonts from Google Fonts. When your browser requests a font file, Google's servers may log your IP address. We have no access to this data. For more information, see Google Fonts Privacy FAQ.
5. Data Retention
Enquiry emails are retained in our inbox for as long as reasonably necessary to respond to and follow up on your request, typically no longer than 12 months. We do not maintain a separate personal data database. Analytics data is retained in accordance with Google's standard retention settings (default 14 months in GA4).
6. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Right of access: to request a copy of any personal data we hold about you.
- Right to rectification: to request correction of inaccurate data.
- Right to erasure: to request deletion of your data, subject to our legal obligations.
- Right to restrict processing: to ask us to limit how we use your data.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
These rights apply under the GDPR (EEA residents) and, with some variation, under Thailand's PDPA (Thai residents). To exercise any of these rights, please contact us using the details in Section 9.
7. International Data Transfers
Our site is hosted on servers provided by Hostinger. Form data is processed by Formspree (USA). Analytics data is processed by Google (USA). Where data is transferred outside the EEA or Thailand, we rely on the standard contractual clauses and data transfer mechanisms offered by those service providers.
8. Children's Privacy
This site is intended for adults seeking dental care information. We do not knowingly collect personal data from children under 16. If you believe a child has submitted data through our forms, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions, data requests, or complaints, please contact:
- Email: info@chiangmaidental.com
- Website: chiangmaidental.com
We aim to respond to all data-related requests within 30 days.