1. Data controller and contact
CMU Nurse-Led Clinic, Faculty of Nursing, Chiang Mai University. Contact: 053-949137 or nlc-nurse@cmu.ac.th.
2. Data we collect
Identity and contact details, appointment and service information, payment records, communications, health information necessary for care, and technical data such as IP address, device, language, logs, and cookies.
3. Purposes and lawful bases
We process data to verify identity, manage appointments, provide healthcare, communicate, issue payment records, maintain security, comply with law, and improve services under the appropriate lawful basis for each activity.
4. Health and sensitive data
Health data is processed only as necessary for care, treatment records, and legal duties, with access controls and system audit records.
6. Retention
Data is retained only as required for the stated purposes and applicable medical record, accounting, and legal obligations, then securely deleted, destroyed, or anonymised.
7. Security
Measures include role- and clinic-based access, authentication, encryption in transit, backups, and monitoring appropriate to the risk.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or submit a complaint.
9. Children
Where consent is required, consent from a lawful guardian or representative will be obtained as required by law.
10. Changes to this notice
Updates will be published here with the latest revision date, and material changes will be communicated through appropriate channels.