นโยบายความเป็นส่วนตัวPrivacy Policy

Effective date: 31 May 2026 Last updated: 31 May 2026

1. Who we are

This Privacy Policy explains how Ing Aesthetic (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you book and receive our spa and facial services.

We are the Data Controller of your personal data under the Personal Data Protection Act B.E. 2562 (the “PDPA”).

2. What personal data we collect

(a) General personal data

• Identity details: name, surname, gender, date of birth / age range
• Contact details: phone number, email, LINE ID, social media handle, address
• Booking details: appointment date and time, services selected, preferred therapist, visit history, and notes
• Payment information: transaction records and receipts (we do not store full card numbers; payments are processed by our payment provider)
• Marketing preferences and your responses to promotions
• Images: before/after or treatment photos, only where you give separate consent
• Technical data (if you use our website/booking page): IP address, device and browser type, and cookies

(b) Sensitive personal data

To deliver treatments safely, we may collect health-related information such as skin conditions, allergies, sensitivities, medical conditions, medications, and pregnancy status. Under Section 26 of the PDPA, this is sensitive personal data and we collect and use it only with your explicit consent.

3. How we collect your data

• Directly from you (intake form, in person, phone, LINE, email, social media)
• Through booking platforms such as GoWabi and Fresha
• Through our website or social media pages (Facebook, Instagram, TikTok)
• Automatically through cookies when you use our website

4. Why we use your data and our lawful basis

5. Disclosure to third parties

We may share your data with:

• Our therapists and staff who provide your service
• Booking platforms you used (GoWabi, Fresha)
• Payment service providers
• IT, cloud, and software service providers who support our operations
• Government authorities where required by law

We do not sell your personal data.

6. International transfer

Some of our service providers (e.g., cloud or booking software) may store data outside Thailand. Where this happens, we take steps to ensure your data receives an adequate standard of protection as required by the PDPA.

7. How long we keep your data

We keep your personal data only as long as necessary for the purposes above:

• Customer and service records: 5 years after your last visit
• Accounting and tax documents: as required by law (generally 5 years, up to 7)
• Marketing data: until you withdraw consent

After these periods, we securely delete or anonymise your data.

8. Your rights

Under the PDPA, you have the right to:

• Access and obtain a copy of your data
• Rectify inaccurate or incomplete data
• Erase or anonymise your data
• Restrict or object to certain processing
• Withdraw consent at any time (this will not affect processing already carried out lawfully)
• Data portability
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC)

To exercise any right, contact us using the details in Section 11.

9. Data security

We apply appropriate technical and organisational measures — access controls, secure storage, and staff confidentiality — to protect your data against loss, unauthorised access, or disclosure.

10. Cookies

If you use our website or online booking page, we may use cookies to operate the site and understand usage. You can manage cookies through your browser settings.

11. Contact us

If you have any questions about this policy or wish to exercise your rights, please contact:

• Ing Aesthetic
• Address: 369 Udomsuk Road, Bang Na Nuea, Bang Na, Bangkok 10260
• Phone: 092-662-4294
• LINE: @ingaesthetic

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be shown on this page with a revised “Last updated” date.