Wonderland Bangkok

Wonderland Bangkok – Privacy Policy

Effective Date: 1 August 2025

1. Introduction

Wonderland Bangkok (“we,” “our,” or “us”) is committed to protecting your privacy in compliance with Thailand’s Personal Data Protection Act (PDPA) and the Department of Thai Traditional and Alternative Medicine (DTAM)/Thai Traditional Medical Council (TTMC) telemedicine regulations. The PDPA applies to any entity that processes personal data of individuals in Thailand, regardless of the organization’s origin. This policy applies to all interactions, including:

  • In‑person purchases at our licensed cannabis dispensary

  • Telemedicine consultations with licensed Thai Traditional Medicine (TTM) doctors

  • Online forms, website visits, and customer support communications

2. Data We Collect

2.1 Identity Information

  • Name, date of birth, gender, passport or Thai ID number, nationality

  • Copy of identification for age and prescription verification

2.2 Contact Information

  • Address, phone number, email, preferred contact methods (e.g., LINE, WhatsApp)

2.3 Medical and Health Data (Sensitive Personal Data under PDPA)

  • Medical history, allergies, current medications, lifestyle habits

  • Health condition details for treatment, telemedicine session notes, prescriptions issued by licensed TTM doctors

2.4 Technical & Usage Data

  • IP address, browser type, device information, website usage analytics

3. Purpose and Legal Basis for Processing

We process your personal data for:

  • Legal compliance with PDPA and DTAM telemedicine regulations

  • Identity verification (over 20 years old, valid prescription)

  • Medical assessment by licensed TTM doctors

  • Service delivery (booking, product provision, payments)

  • Safety and security (fraud prevention, incident response)

  • Customer communication and support

  • Marketing (only with explicit consent)

Legal bases under PDPA include:

  • Explicit consent for sensitive health data

  • Contractual necessity for service provision

  • Legal obligation to comply with Thai regulations

  • Legitimate interests (e.g., improving services, preventing fraud) 

4. Data Retention

  • Medical records: retained for 3 years post-consultation per DTAM requirements

  • Other personal data: retained for up to 10 years for legal, tax, or business purposes, unless earlier deletion is requested

5. Data Sharing & Transfers

We may share your data with:

  • Licensed TTM doctors for prescription and telemedicine services

  • Payment processors and financial institutions

  • Government authorities, when legally required

  • IT and platform providers for secure data handling

  • Overseas partners, where necessary, only with adequate safeguards and, if required, your explicit consent for cross-border transfer.

6. Data Security Measures

We employ industry-standard safeguards, including:

  • Encryption in transit and at rest

  • Role-based access control

  • Secure telemedicine platforms compliant with DTAM/TTMC standards. Regular security audits and staff training

7. Your Rights Under PDPA

You may request to:

  • Access or obtain a copy of your personal data

  • Correct or update your data

  • Withdraw consent (may affect service provision)

  • Request deletion of your data (subject to retention obligations)

  • Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC)

8. Cookies & Tracking

We use cookies and similar technologies to:

  • Enhance website functionality and user experience

  • Analyze site traffic

You may disable non-essential cookies via your browser settings, but full functionality may be impacted. Marketing or analytics cookies will be enabled only with your prior consent .

9. Cross-Border Data Transfers

Where data may be transferred internationally:

  • We ensure that such transfers comply with PDPA requirements

  • We may seek your explicit consent in applicable cases

10. Policy Updates

We will update this policy as needed to reflect changes in law or operations. Updates will be posted online with the revised effective date.

11. Contact Us / Data Protection Officer (DPO)

For questions or data-related requests, please contact our DPO:

Wonderland Bangkok – Data Protection Officer
📧 Email: DPO@wonderlandbangkok.com
📞 Phone: +66 63‑192‑0420
📍 Address: Soi Sukhumvit 5, Khwaeng Khlong Toei Nuea, Khet Watthana, Bangkok 10110