Legal
Privacy Policy
Miroven · Last Updated: 28 February 2026
Miroven ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our facility — including prospective residents, current residents, and family members. This policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to personal data collected through our website at mirovenen.info, by telephone, in person, and through correspondence.
1. Data Controller
Miroven operates as the data controller responsible for the personal data described in this policy. Our registered address is 9 Moo 2, Kamala, Kathu, Phuket 83150, Thailand.
For all data-related enquiries, please contact us at [email protected].
2. Personal Data We Collect
Depending on the nature of your interaction with us, we may collect the following categories of personal data:
- Identity data: Full name, date of birth, nationality, identification document details
- Contact data: Email address, telephone number, postal address
- Health and care data: Medical history, care needs, dietary requirements, medication records, therapeutic plans (for residents only)
- Financial data: Billing and payment information (for program fees)
- Website data: IP address, browser type, pages visited, cookies (see our Cookie Policy)
- Communications data: Records of phone calls, emails, and written correspondence
We collect data directly from you or your designated family member, from healthcare providers (with your consent), and automatically via our website.
3. How We Use Personal Data
We process personal data for the following purposes and on the following legal bases:
Providing Residential Care Services
Legal basis: Performance of a contract and vital interests. We use health, identity, and care data to deliver and coordinate the care program a resident is enrolled in.
Communicating with Families
Legal basis: Legitimate interest and consent. We use contact data to provide updates on residents, respond to enquiries, and maintain family communication channels.
Managing Enquiries and Admissions
Legal basis: Consent and pre-contractual steps. Information submitted via our contact form or by telephone is used to assess suitability and progress admissions discussions.
Billing and Financial Administration
Legal basis: Contract performance and legal obligation. Financial data is used solely for the administration of program fees and associated accounting requirements.
Website Analytics
Legal basis: Consent (via cookie preferences). We use anonymised data to understand how visitors interact with our website and improve its usability.
4. Data Retention
We retain personal data only for as long as necessary for the purpose it was collected and as required by applicable law:
- Resident care records: 7 years after the end of the care relationship
- Enquiry and admissions data (not admitted): 2 years
- Financial records: 7 years (statutory requirement)
- Website analytics data: 26 months
- General correspondence: 3 years
5. Data Sharing
We do not sell, rent, or commercially share personal data. We may share data with the following parties where necessary:
- Medical specialists and hospitals involved in a resident's care (with consent)
- Healthcare service providers contracted to support our programs
- Professional advisers (legal, financial, audit) under confidentiality obligations
- Regulatory bodies or law enforcement agencies where required by Thai law
- Website service providers (hosting, analytics) under contractual data processing agreements
6. Data Security
We take the security of personal data seriously. Our measures include:
- Encrypted storage for digital health records
- Role-based access controls — only staff directly involved in care access resident data
- Staff training on data confidentiality and PDPA obligations
- Regular internal reviews of data handling practices
- Breach notification procedures in line with PDPA requirements
7. Cookies
Our website uses cookies to function correctly and to understand how visitors use the site. Optional analytics and marketing cookies are only placed with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.
8. Your Rights Under Thailand's PDPA
Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request that inaccurate data be corrected or incomplete data be updated.
Right to Erasure
Request deletion of your data where there is no longer a lawful basis for its retention.
Right to Data Portability
Receive your data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time for processing based on consent. This does not affect prior lawful processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may contact Thailand's Personal Data Protection Committee (PDPC) at www.pdpc.or.th.
9. Third-Party Links
Our website may contain links to third-party sites. We have no control over those sites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any external site you visit.
10. Children and Young Persons
Miroven's services are intended for adults and are not directed at persons under the age of 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, please contact us promptly.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via our website or directly to affected individuals. Continued use of our services following a change constitutes acceptance of the updated policy.
12. Contact Us
For any questions about this policy or about how your data is handled: