Privacy Policy

Effective Date: [29th July 2024]

This Privacy Policy outlines how Chulasurgery, an application developed for recording data of patients of the Princess Sirindhorn Craniofacial Center, collects, uses, shares, and protects our patients' and users' personal information.

1. Information We Collect

User's Information: User's personal information includes but not limited to:

• Name
• Contact information (email)
• Images (if available from yourself)
• Device Information: We collect device-specific information when you use our app, including:
  Device type
  Operating system
  App version
  IP address

Patient's Information: We collect personal information directly from patients, including but not limited to:

• Name
• Date of birth
• Contact information (address, phone number, email)
• Medical records (diagnosis, treatment history, surgical procedures, medications, allergies)
• Images (before and after surgery, medical images)
• Insurance information
• Device Information: We collect device-specific information when you use our app, including:
  Device type
  Operating system
  App version
  IP address

Data Minimization: We collect only the necessary data for the app's purpose.

Consent: We also obtain informed consent from patients for data collection and use.

Data Breach Notification: We have a plan in place for notifying affected individuals in case of a data breach.

2. How We Use the Personal Information

We use the patients' information for the following purposes:

• Providing Healthcare Services: To deliver and manage patient care, including scheduling appointments, coordinating treatment plans, and monitoring patient progress.
• Research and Development: To improve our app and healthcare services through data analysis and research.
• Compliance: To comply with legal and regulatory requirements, such as reporting to health authorities.
• Communication: To contact patients or authorized healthcare providers regarding appointments, treatment updates, or other relevant information.

We use the users' information for the following purposes:

• Research and Development: To improve our app and healthcare services through data analysis and research.
• Compliance: To comply with legal and regulatory requirements, such as reporting to health authorities.
• Communication: To contact you regarding appointments and treatment.

3. Data Sharing

We may share the personal information with:

• Authorized Healthcare Providers: To facilitate patient care and coordination. Business Associates: With trusted third-party service providers who assist in our operations (e.g., data storage, IT support).
• Legal Authorities: If required by law or legal process.

4. Data Security

We implement reasonable security measures to protect the personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain the personal information for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

6. Users' and Patients' Rights

Users and patients may have certain rights regarding their personal information, such as the right to access, correct, or delete their data. To exercise these rights, please contact us at craniofacial@chula.md.

7. Children's Privacy

Our app is not intended for use by children. We do not knowingly collect personal information from child users.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at craniofacial@chula.md.

Additional Considerations:

We ensure that our practice is compliant with applicable data protection laws and regulations especially Thailand's Personal Data Protection Act BE 2562 (PDPA).