Privacy Policy on Healthcare Services

Introduction

Hospital Vichaiyut and Vichaiyut Medical Center, as large private healthcare facilities, primarily provide patient care services. To ensure professional healthcare processes aligned with standards, it is necessary for the hospital to collect, gather, use, process, and disclose personal information as required.

Objective

  1. Identity Verification of Service RecipientsāļĢ
  2. Healthcare Treatment Processes
  3. Quality Improvement in Healthcare Services
  4. Appointment Scheduling for Service Reception
  5. Safety Measures During Hospital Stay

Personal information to be collected and duration of co

  1. Basic personal information and health data, including treatment information, results of radiological and laboratory tests, disease diagnoses, medication usage, drug allergies, and other information used in the healthcare process.
  2. Data from photographs, telephone conversation recordings, telemedicine, and closed-circuit cameras.
  3. Payment details
  4. Medical records will be retained for a minimum of 5 years, following the Hospital Act B.E. 2541. If it becomes necessary to delete or destroy medical records, advance notice will be provided.

Types of personal data or entities to which personal da

  1. Basic Personal Data, Health Information, and Medical Treatment Data
  2. The forwarding of medical treatment information to other healthcare facilities, as requested by the data subject or authorized relatives, or the complete transfer of health information to insurance companies, as consented by the data subject, or the transmission of information to government agencies as required by law.
  3. The transmission of basic data and health information to other data processors, such as contracted companies working with the hospital. This includes companies providing meal preparation, ensuring security, medical equipment, laboratory services, and financial institutions, for the purposes of healthcare processes.

Data security measures

  1. Paper-based data will be kept only by those who require the information and will be destroyed in accordance with standard procedures when no longer necessary.
  2. Data within the Hospital Information System (HIS) is secured according to ISO 27001 standards.

Rights of the data subject

The data subject has rights according to the Personal Data Protection Act B.E. 2562.

Information about the Personal Data Controller, loca

You can contact the Personal Data Control Committee at Vichaiyut Company Limited by mail at 53 Setsiri Road, Phyathai, Bangkok 10400, or by phone at 0-2265-7777, or via email at medcenter@vichaiyut.com. This announcement is effective as of September 28, 2022 (revised from June 1, 2022).
Vichaiyut Company Limited