Privacy Policy
Our privacy policy explains how Elder Thai collects, uses, shares, and protects your personal data and health information.
Last updated: September 8, 2026
Biznitos Co., Ltd., operating as "Elder Thai" ("Elder Thai," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit elderthai.com (the "Site"), contact us, apply as a caregiver, or receive Services from us. It is written to comply with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
We are the "data controller" for the personal data described here: Biznitos Co., Ltd., 90 Thong Lo 2, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. You can reach us about privacy matters at [email protected] or +66 62 837 0302.
1. Personal Data We Collect
We collect the following categories of personal data:
- Contact and account data: name, phone number, email, address, and messaging IDs (such as LINE or WhatsApp) for you and, where relevant, family members coordinating care.
- Care recipient information: the name, age, address, and living situation of the person receiving care.
- Health and sensitive data: medical history, diagnoses, medications, allergies, mobility level, cognitive status, behavioral risks, and other health-related details needed to assess needs and match a caregiver. Under the PDPA, health data is "sensitive personal data" and receives extra protection, described in Section 4 below.
- Billing and payment data: billing name, address, tax ID (where invoices require it), and bank transfer references. We do not store full payment card numbers.
- Communications: records of calls, emails, LINE, and WhatsApp messages between you and our team, and information you submit through our online intake form or chatbot.
- Caregiver and job applicant data: if you apply to work with us, we collect your CV, identification documents, background and reference check results, certifications, and related recruitment information.
- Website usage data: pages viewed, referring pages, approximate location (from IP address), device and browser type, and similar analytics data, collected automatically when you browse the Site.
2. How We Collect Personal Data
We collect personal data when you fill out a form or chatbot intake on the Site, call, email, or message us on LINE or WhatsApp, book Services, or apply to work as a caregiver. We also collect information directly from caregivers and nurse coordinators during service visits (such as care notes and observations), and automatically through cookies and similar technologies when you browse the Site (see Section 8).
3. Why We Use Your Personal Data (Purposes and Legal Bases)
| Purpose | Legal basis under the PDPA |
|---|---|
| Assessing care needs, matching a caregiver, and delivering Services | Performance of a contract with you; explicit consent for sensitive health data |
| Responding to inquiries and coordinating bookings by phone, email, LINE, or WhatsApp | Performance of a contract, or steps taken at your request before entering one |
| Billing, invoicing, and tax compliance | Performance of a contract; compliance with legal obligations |
| Protecting the safety of the care recipient, caregiver, or others in an emergency | Vital interests of the data subject or another person |
| Recruiting, screening, and managing caregivers | Performance of a contract; legal obligation; consent for background checks |
| Improving the Site and understanding how visitors use it | Legitimate interests, balanced against your rights; consent for non-essential cookies |
| Marketing communications (such as care guides or newsletters) | Consent, which you may withdraw at any time |
| Complying with Thai law, regulatory requests, or legal proceedings | Compliance with a legal obligation |
4. Special Handling of Health and Sensitive Data
Health information is sensitive personal data under Section 26 of the PDPA and requires explicit consent, except where an exemption applies (for example, to protect someone's life, body, or health when they cannot give consent). Before we collect health information about a care recipient, we will seek explicit consent from the care recipient, or, if the care recipient lacks the capacity to consent (for example, due to advanced dementia or unconsciousness), from their legal representative, guardian, or the family member arranging care on their behalf. By providing health information about a care recipient, you confirm that you are authorized to share it with us for the purposes in this Policy, or that an applicable legal exemption applies.
We limit access to health data internally to the staff, nurse coordinators, and assigned caregivers who need it to provide safe care, and we do not use health data for marketing.
5. Who We Share Personal Data With
We do not sell personal data. We share personal data only as needed with:
- Assigned caregivers and nurse coordinators, so they can safely and appropriately provide care;
- Hospitals, clinics, or medical professionals, where necessary for the care recipient's treatment or in an emergency, or at your request;
- Service providers, such as accounting, IT hosting, communications platforms (including LINE and WhatsApp, which process messages under their own privacy terms), and payment or banking partners, who process data on our behalf under confidentiality obligations;
- Government authorities or regulators, where required by Thai law, court order, or to establish, exercise, or defend legal claims;
- A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to continued protection of your data.
6. International Data Transfers
Some of our service providers (for example, cloud hosting, email, or messaging platforms) may store or process data on servers outside Thailand. Where we transfer personal data outside Thailand, we take steps required under the PDPA, such as relying on providers with adequate data protection standards, contractual safeguards, or your consent, as applicable.
7. How Long We Keep Personal Data
We keep personal data for as long as needed to provide Services, maintain accurate care and billing records, meet tax and accounting retention requirements under Thai law (generally at least 5 years for accounting records), handle any dispute, and for a reasonable period after a caregiver application is submitted. When data is no longer needed, we delete or anonymize it, subject to legal retention requirements.
8. Cookies and Website Analytics
The Site uses cookies and similar technologies to operate correctly and to understand how visitors use the Site, including through tools such as Google Search Console and standard web analytics. Essential cookies are needed for the Site to function. Where required by law, we will ask for your consent before setting non-essential analytics or marketing cookies, and you can control cookies through your browser settings at any time.
9. Data Security
We use reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, disclosure, alteration, or loss, including restricting internal access to health data on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights Under the PDPA
Subject to the exceptions and conditions under the PDPA, you (or, for a care recipient who lacks capacity, their legal representative) have the right to:
- Be informed about how your personal data is collected and used;
- Access and request a copy of your personal data;
- Request correction of inaccurate or incomplete personal data;
- Request erasure or de-identification of your personal data in certain circumstances;
- Request that we restrict or object to certain processing;
- Request data portability, where technically feasible;
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, contact us at [email protected]. We may need to verify your identity, or your authority to act for a care recipient, before responding. If you are not satisfied with our response, you may complain to Thailand's Personal Data Protection Committee (PDPC).
11. Children's Data
The Site and Services are directed at adults arranging elder care and are not directed at children. We do not knowingly collect personal data directly from children. If a care recipient's household includes children whose data is incidentally provided (for example, in a household description), we treat that data with the same care as other personal data described here.
12. Job Applicant Data
If you apply to become a caregiver, we process your application, identification, and background check data to assess your suitability, in line with Thai labor and licensing requirements. We retain this data as needed for recruitment and compliance purposes and, if you are hired, as part of your employment or engagement records.
13. Third-Party Links and Platforms
The Site may link to or integrate with third-party platforms, such as LINE, WhatsApp, or hospital websites. Those platforms have their own privacy practices, which we encourage you to review; this Policy does not cover their handling of your data.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date above shows when it was last revised. We encourage you to review this page periodically.
15. Contact Us
Biznitos Co., Ltd. (Elder Thai)
90 Thong Lo 2, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Email: [email protected]
Phone: +66 62 837 0302
Next step
Need a reliable caregiver in Thailand?
When illness or surgery means you cannot manage alone in Thailand, you need a trained caregiver. Not a helper who wings it. Our caregivers support recovery or daily care when you need it most.
[email protected] · +66628370302