Privacy

How we handle your information

This notice is given under Section 23 of Thailand’s Personal Data Protection Act (PDPA). It sets out what The Astell Clinic collects, why, who receives it, and the rights you hold over it.

1. Who is responsible

The Astell Clinic (ดิแอสเทล คลินิกเวชกรรม), healthcare facility licence no. 10101026867, at 162/5 Yossunthorn, Sukhumvit 20 Alley, Khlong Toei, Bangkok 10110.
Contact: +66 92 747 8885 · LINE @theastell

2. What we collect

What you give us. When you fill in the enquiry form — your name, email address, WhatsApp number, the treatments you are interested in, and anything you write in the message field.

What is recorded automatically. The ordinary technical record any website keeps — IP address, device and browser type, which pages you viewed, where you arrived from, and how long you stayed.

What stays in your browser. Your language choice (English or 中文) is kept in your own browser. It is never sent to us or to anyone else, and clearing your browsing data removes it. If you arrived through one of our advertisements, that advertisement’s tracking tags are also kept in your browser for 30 days; they are sent only with the enquiry form, if you send it, so we know which advertisement the enquiry came from.

3. Why, and on what basis

To answer your enquiry, arrange your consultation, and contact you about it — on the basis of your consent and of what is necessary to respond to a request you made. You may withdraw consent at any time.

To understand how the site is used — which pages are read, which channel visitors use to reach us, and which advertisement brought a visit — on the basis of legitimate interest, in aggregate only, never to identify an individual.

To measure our advertising on Facebook and Instagram, the site uses the Meta Pixel. It records which pages of this site are visited and actions such as tapping to contact us, and Meta may link this to a Facebook or Instagram account you are signed in to. When you send the enquiry form, your email address and phone number are also passed to Meta, but only in hashed form — turned on your device into a one-way code — so that Meta can match the enquiry to an account without receiving the address or the number themselves. Your name, your message and your treatment choices are never sent to Meta. You can turn this off in your Facebook or Instagram settings under “Your activity off Meta technologies”, or by blocking cookies in your browser.

To measure which advertising brings enquiries, the clinic’s advertising agency keeps a copy of each enquiry sent through the form, together with the advertisement it came from — on the basis of the consent you give when you send the form. The agency uses it for this purpose only.

4. Who receives it

The site relies on the following services, which process data to the extent needed to provide them:

We do not sell your personal data, and we do not pass it to data brokers. What goes to Google and Meta for advertising measurement never includes your name, your message, or which treatments you chose; Meta receives your email address and phone number only in hashed form (section 3). In Google, ad personalisation and remarketing audiences are switched off for this site.

These tools work through cookies: Google Analytics uses the _ga cookies to tell a returning visitor from a new one, and Google Ads uses the _gcl cookies to record an ad click. Neither holds your name or any medical information. You may delete or block them in your browser at any time — every part of this site keeps working without them.

5. What we do not send to analytics

This deserves its own section. The contents of the enquiry form do not go into Google Analytics. Your name, your email, your phone number, your message — and which treatments you selected — reach the clinic, and the clinic’s advertising agency, which keeps a copy to measure advertising (section 4).

Treatment choices are health-related information. Analytics receives only a number — how many boxes were ticked — never which ones.

The treatments you choose on the form are never sent to Google or Meta, in any form.

6. Sending data abroad

The services above operate servers outside Thailand. Under PDPA Sections 28–29 we use them only where the destination or the provider maintains an adequate standard of protection, supported by standard contractual terms.

7. How long we keep it

Enquiries: 2 years from our last contact, unless you become a patient of the clinic — in which case medical-records rules apply instead.
The advertising agency’s copy of an enquiry: deleted automatically 24 months after it was sent.
Analytics: kept in aggregate, with event-level data set to expire after 2 months.

8. Your rights

Under PDPA Sections 30–36 you may ask to see what we hold about you, to have it corrected, to have it deleted or its use stopped, to restrict how it is processed, to receive a copy in a portable form, and to object to particular processing.

Ask through any of the contact details above. We will respond within 30 days.

9. If you are not satisfied

You may complain to the Office of the Personal Data Protection Committee (PDPC), under Thailand’s Ministry of Digital Economy and Society.

Last updated 22 October 2026

Make an appointment

Get an estimate, or simply come in and talk to us.

Book a consultation