Privacy Policy

1. Who we are

ImagineHealth Co., Ltd. (also referred to as “ImagineHealth”, “we”, “us” or “our”) is a company registered in Thailand under company registration number 0105565138123. For the purposes of Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), ImagineHealth is the data controller for the processing described in this policy.

This policy applies to the corporate website ImagineHealth.io and to personal data received through our corporate enquiries and business relationships. Imagine-Thailand.com and services provided through that website may be governed by additional or separate notices.

2. Personal data we may collect

Depending on how you interact with us, we may collect:

• identity and contact details, such as your name, email address, telephone number, country and preferred contact method;
• professional information, such as your employer, position, business interests and the nature of your enquiry;
• communications, meeting notes, proposals and records relating to a prospective or existing business relationship;
• technical information made available when you use the website, such as IP address, browser or device type, pages visited and cookie preferences;
• information you provide when registering for or attending a meeting, presentation or event; and
• other information you choose to provide to us.

Please do not send medical records or other sensitive personal data through the corporate contact form. If sensitive or health information is genuinely required for a requested facilitation service, we will handle it separately and only with an appropriate legal basis, including explicit consent where required.

3. How we obtain personal data

We may receive personal data directly from you by email, telephone, WhatsApp, LinkedIn, our contact form, meetings or events. We may also receive relevant professional information from your organisation, a mutual contact, event organiser, publicly available professional source or another person authorised to introduce you.

4. Why we use personal data

• Respond to enquiries and arrange calls or meetings.
• Assess potential market-entry, partnership, investment or business-development opportunities.
• Prepare proposals and provide requested services.
• Manage relationships with clients, partners, providers, suppliers and other stakeholders.
• Organise events, presentations, visits and follow-up communications.
• Operate, secure, maintain and improve our website.
• Send relevant business updates where you have consented or where otherwise permitted by law.
• Establish, exercise or defend legal claims and comply with legal obligations.

5. Legal bases

Depending on the circumstances, we rely on one or more lawful bases recognised under applicable law: your consent; steps requested before entering into a contract; performance of a contract; compliance with a legal obligation; and our legitimate interests or those of a third party, where those interests are not overridden by your rights.

6. When we share information

We may share relevant personal data with employees and authorised representatives of ImagineHealth; professional advisers; website, communications, cloud and other operational service providers; and potential or existing business partners when necessary to progress an opportunity you have asked us to explore. We may also disclose information where required by law, a court or a competent authority.

We limit disclosure to what is reasonably necessary and expect recipients to protect the information appropriately. We do not sell or rent personal data.

7. International transfers

ImagineHealth works internationally and some recipients or technology providers may be located outside Thailand or your country of residence. Where personal data is transferred internationally, we take reasonable steps required by applicable law to ensure an appropriate level of protection, which may include contractual safeguards or another lawful transfer mechanism.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including managing an enquiry or business relationship and meeting legal, tax, accounting and record-keeping requirements. Retention periods vary according to the information, relationship and applicable limitation period. Information that is no longer required will be deleted, destroyed or anonymised where appropriate.

9. Security

We use reasonable organisational and technical measures designed to protect personal data against loss, misuse and unauthorised access, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure, and you should avoid sending confidential or sensitive information through unsecured channels.

10. Your rights

Subject to the PDPA and other applicable law, you may have the right to request access to or a copy of your personal data; correct inaccurate information; request deletion, restriction or portability; object to certain processing; withdraw consent; and complain to the relevant supervisory authority. Withdrawing consent does not affect processing already carried out lawfully.

We may need to verify your identity before responding. Some rights are subject to legal conditions and exceptions.

11. Marketing communications

You may ask us to stop sending marketing communications at any time by using the unsubscribe option provided or contacting us. We may still send necessary service or relationship communications that are not marketing.

12. Cookies and external websites

Our use of cookies and similar technologies is explained in our Cookie Policy. This website also links to third-party websites whose privacy practices are controlled by their respective operators.

13. Children

This corporate website is not directed at children. We do not knowingly collect personal data from children through ImagineHealth.io. If you believe a child has provided information without appropriate authorisation, please contact us.

14. Changes to this policy

We may update this policy to reflect changes in our activities, technology or legal obligations. The current version and its effective date will be published on this page.

15. Contact us

To ask a privacy question or exercise a data-protection right, contact: