Privacy Policy

The data controller for Tooth Boutique Dental Clinic is Carepap Holdings Co., Ltd. (บริษัท แคแป๊ป โฮลดิ้งส์ จำกัด), since 1 February 2026 (see the business-transfer notice below). Our Data Protection Officer can be reached at carepap.holdings@gmail.com.

• What you give us when you contact us on LINE, by phone or email, or through social media (Facebook, Instagram, TikTok): typically your name, phone number and what you would like to discuss.
• What you give us at the clinic: full name, ID or passport number, date of birth, address, medical history and allergies, intra-oral photographs and X-rays, and your treatment record.
• Cookies on this website: essential cookies that remember your language and cookie choice, and — only if you accept — Google Analytics 4 (visit statistics) and Google Ads cookies (whether a LINE tap or a call came from an ad). This site has no forms and does not use the Facebook Pixel.
• Staff data: name, address, date of birth, health information and employment records.

• Providing dental care, treatment and appointments — contract, and vital interest.
• Keeping your treatment record for future planning and professional standards — contract, and legitimate interest.
• Legal obligations — medical records are kept for at least 5 years under the Sanatorium Act; staff records under labour law.
• Statistics, ad measurement and marketing — the Google Analytics and Google Ads cookies and any news or offers tailored to you — consent, which you may decline or withdraw at any time without affecting your care.

• LINE — the LINE Official Account you use to reach us.
• Google — Google Analytics 4 and Google Ads (statistics and conversion measurement, with your consent) and the Google Maps embed on the contact page.
• Our web hosting provider — ordinary server access logs (IP address, time, page requested).
• Dental laboratories and appliance manufacturers — for example a digital scan sent to produce clear aligners or a crown, limited to what production requires.

We do not sell personal data and do not disclose treatment records to third parties without your consent or a legal requirement.

• Medical and treatment records: at least 5 years from your last treatment, as the Sanatorium Act requires.
• LINE and other messages: while you are a patient, and no more than 5 years after your last contact.
• Cookies: language and cookie choice up to 1 year; Google Analytics up to 2 years (data retained 14 months); Google Ads up to 90 days.
• Employee data: duration of employment plus 1 year.

Access to records is limited to the dentists and staff assigned to your care, and staff are prohibited from recording your images or data on personal devices. Before-and-after photographs appear on this website or social media only with your consent.

Under the Personal Data Protection Act B.E. 2562 you may request access to and a copy of your data, correction, restriction of or objection to processing, portability, erasure once the statutory retention period has passed, and withdrawal of consent for marketing at any time. Exercise these rights at the clinic or by email below.

Summary of the clinic's notice of 27 January 2026; the Thai original is on the Thai version of this page.

CWJ Co., Ltd. (บริษัท ซี ดับเบิ้ลยู เจ จำกัด) transferred the operation and the personal-data controllership of Tooth Boutique Dental Clinic to Carepap Holdings Co., Ltd. (บริษัท แคแป๊ป โฮลดิ้งส์ จำกัด) with effect from 1 February 2026. All personal and health data previously held by CWJ Co., Ltd. passed to Carepap Holdings Co., Ltd. as the new controller, under the same confidentiality and security standards.

Your data continues to be used to provide dental care and appointments (contract and vital interest), to keep your treatment record (contract and legitimate interest), to meet the legal duty to retain medical records for at least 5 years, and — only with your consent, which you may withdraw at any time without affecting your care — for tailored news and offers.

Access is restricted to assigned dentists and staff, who are prohibited from recording your images or data on personal devices. You may exercise your PDPA rights at the clinic through the usual channels; the Data Protection Officer of Carepap Holdings Co., Ltd. is available at the clinic's current premises.

Signed 27 January 2026 — Dr. Peeranoot Chenhansa (Dr. Care), Managing Director, Carepap Holdings Co., Ltd.