Who we are
ClinicPins is a Bangkok-based medical tourism concierge service. For the information covered by this notice, ClinicPins decides why and how it is used.
You can contact us at hello@clinicpins.com or at 130-132 Sindhorn Building, Tower 2, 10th Floor, Wireless Road, Lumpini, Pathumwan, Bangkok 10330, Thailand.
What we collect
When you send a consultation inquiry, we receive the information you enter: your name, email address, phone or WhatsApp number, country, age, treatment interest, travel timeframe, what you want us to prioritise when comparing clinics, recovery-stay preference, preferred contact method, optional notes, and the page where you opened the form.
We also create a random submission ID and record the submission time and your contact consent. A treatment choice or something you add in the notes may reveal health-related information, so please share only what we need to answer the first inquiry. Do not send medical records through this form.
For security and delivery, our systems briefly process technical information such as your IP address, browser request details, submission ID, the email provider message ID, the type of page you submitted from, and whether delivery was accepted or failed. Application logs do not include your name, email, phone number, treatment, age, or notes.
How we use your information
We use inquiry information to:
- respond through your chosen contact method and understand what help you want;
- research suitable clinics, likely costs, and practical next steps;
- send one transactional acknowledgement after the team email is accepted;
- protect the form from abuse and diagnose email delivery problems; and
- handle privacy requests and meet legal obligations where they apply.
We use the contact and treatment details because you ask us to respond and give explicit consent through the form. You can withdraw that consent for future use at any time. We process limited technical data to secure the form and troubleshoot delivery, based on our legitimate interest in keeping the service reliable and subject to your applicable rights.
The acknowledgement is transactional. Sending the form does not subscribe you to marketing, and we do not make automated decisions about your eligibility for care.
Who receives your information
We use the following services for the active website and inquiry flow:
| Recipient | Why it receives data | Typical data |
|---|---|---|
| ClinicPins team | Responding and concierge planning | The inquiry you submit |
| Resend | Sending the team email and acknowledgement | Email addresses, message content, delivery metadata |
| Google Workspace | The monitored ClinicPins team mailbox | The team email and later correspondence |
| Vercel | Hosting, request handling, and diagnostic logs | Technical request data and delivery IDs, not the inquiry itself |
| PostHog | Site usage, performance, and interaction analytics | Page, device, browser, and interaction data |
| Google Analytics via Google Tag Manager | Audience and website-use measurement | Page, referrer, device, browser, and event data |
We do not automatically forward a new inquiry to a clinic. After discussing options with you, we may share the minimum information needed with a clinic or hospital when you ask us to arrange a consultation or otherwise direct us to do so. Clinic partnerships fund our service, as explained in our editorial policy.
These providers may process information outside your country, including in Thailand and the United States. Their privacy terms explain how they handle information and international transfers. We may also disclose information when required by law or needed to protect legal rights.
How long we keep information
The monitored team mailbox is the operational record for an inquiry. We delete an inquiry no later than 12 calendar months after submission, review retained inquiry data every quarter, and delete it earlier when it is no longer needed or after a valid deletion request. A documented legal obligation or legal claim may require a longer period.
Resend retains standard email content and delivery logs for 30 days while the account is active. Vercel logs contain only the restricted diagnostic fields described above and follow the platform and project retention settings. Analytics records are kept only as long as needed to understand site use and do not contain the consultation-form content.
We also keep a restricted, encrypted archive of older inquiries under the same 12-month maximum and deletion-request process. It is not an active website database and is accessible only to the approved inquiry owners.
Your choices and rights
Depending on where you live, you may have rights to ask for access, correction, deletion, restriction, portability, or an objection to certain uses. You can also withdraw consent for future contact or health-related information processing.
Email hello@clinicpins.com with the address or phone number used in your inquiry and tell us what you want us to do. We may ask for enough information to confirm that the request belongs to you. We will also pass a valid request to relevant service providers where necessary.
You may complain to the data protection authority where you live if you believe your information has been handled unlawfully.
Contact us
Privacy questions and requests can be sent to hello@clinicpins.com. This notice may change when our services or legal obligations change; the date at the top shows the latest published version.