Privacy Policy

Effective date: 3 July 2026 Last updated: 3 July 2026


1. Who we are

This Privacy Policy explains how balancedbodybase (“we,” “us,” “our”), operating the website balancedbodybase.com and providing online weight-management consultations, collects, uses, and protects your personal data.

  • Data controller: balancedbodybase
  • Operated online from: Bangkok, Thailand
  • Email: info@balancedbodybase.com

If you have any questions about this policy or your data, contact us at info@balancedbodybase.com.


2. The data we collect

Depending on how you interact with us, we may collect:

Information you give us

  • Contact details — name, email address, and any messaging handles (e.g. LINE) you choose to share.
  • Booking details — appointment date/time, time zone, and the information you provide when scheduling.
  • Health and lifestyle information — details you choose to share before or during a consultation (for example weight-management goals, medical history, medications, symptoms, and questions about GLP-1). This is “sensitive personal data” and is treated with extra care (see Section 4).
  • Payment information — processed by our third-party payment provider; we do not store full card details ourselves.
  • Communications — messages you send us by email, chat, LINE, or web form.

Information collected automatically

  • Technical data — IP address, browser type, device information, and general location.
  • Usage data — pages visited and interactions on balancedbodybase.com.
  • Cookies and similar technologies — see Section 8.

Consultation delivery

  • Consultations are held over Google Meet. The call itself is processed through Google’s services (see Section 6). We do not record consultations unless you give us separate, explicit consent.

3. How we use your data

We use your data to:

  • Schedule, deliver, and follow up on your consultation;
  • Answer your questions and provide guidance during the consultation;
  • Where appropriate and with your consent, refer you to a licensed clinic for further assessment;
  • Process payments;
  • Respond to your enquiries and communicate with you about your appointment;
  • Maintain records as required for our professional and legal obligations;
  • Operate, secure, and improve our website;
  • Comply with applicable laws.

We do not sell your personal data, and we do not use your health information for advertising.


4. Sensitive health data and legal basis

Under the PDPA, health information is sensitive personal data and requires a higher standard of protection.

  • We collect and use your health information only with your explicit consent, or where otherwise permitted by law (for example, where necessary for the provision of health services by a qualified professional).
  • You provide this information voluntarily, and you may choose not to share particular details — though this may limit the guidance we can offer.
  • You can withdraw your consent at any time (see Section 9). Withdrawing consent does not affect processing carried out before withdrawal.

For non-sensitive data, our legal bases include your consent, the performance of our service to you, our legitimate business interests, and compliance with legal obligations.


5. When we share your data

We share personal data only where necessary, and never sell it. We may share it with:

  • Licensed clinics or medical providers — only with your consent, when we refer you for further assessment or care.
  • Service providers (“processors”) who help us operate, such as:
    • Google (Google Meet / Google Workspace) — to deliver video consultations;
    • Our third-party payment provider — to process payments;
    • Hostinger — website hosting;
    • Scheduling and email tools we use to manage appointments and communicate with you.
  • Professional advisers (e.g. legal or accounting) where necessary.
  • Authorities — where required by law or to protect rights, safety, or legal interests.

We require our service providers to protect your data and to use it only for the purposes we specify.


6. International data transfers

Some of our service providers (for example Google) may process data on servers outside Thailand. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection consistent with the PDPA and, where applicable, other laws. If you are located in the EU/UK, additional safeguards may apply.


7. How long we keep your data

We keep personal data only as long as necessary for the purposes described in this policy, including:

  • to provide and follow up on your consultation;
  • to meet professional record-keeping and legal obligations;
  • to resolve disputes and enforce our agreements.

When data is no longer needed, we securely delete or anonymize it. We keep consultation records only for as long as necessary to meet our professional and legal record-keeping obligations.


8. Cookies

Our website may use cookies and similar technologies to function properly, remember your preferences, and understand how the site is used. You can control or disable cookies through your browser settings, though some features may not work as intended.

We may also use analytics and advertising cookies, including tools such as the Meta Pixel and Google Analytics, to understand how our website is used and to measure the performance of our advertising. Where required by law, we ask for your consent before setting non-essential cookies, and you can manage or withdraw your consent at any time through your browser settings or our cookie banner.


9. Your rights

Subject to applicable law (including the PDPA), you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Delete your data (“right to erasure”) in certain circumstances;
  • Withdraw consent at any time, including for the processing of health data;
  • Object to or restrict certain processing;
  • Request data portability where applicable;
  • Lodge a complaint with the relevant data protection authority (in Thailand, the Office of the Personal Data Protection Committee — PDPC).

To exercise any of these rights, contact us at info@balancedbodybase.com. We will respond within the time required by law. We may need to verify your identity first.


10. How we protect your data

We use reasonable technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access — including secure communication tools, access controls, and confidentiality practices. No method of transmission or storage is completely secure, but we work to protect your information and to review our safeguards regularly.


11. Children’s privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.


12. Not a substitute for emergency care

Our consultations provide guidance and, where appropriate, referral to a licensed clinic. They are not a substitute for emergency medical care. If you have a medical emergency, contact your local emergency services immediately.


13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be posted on this page, and where required by law, we will seek your renewed consent.


14. Contact us

For any questions, requests, or complaints about this Privacy Policy or your personal data:

  • balancedbodybase
  • Email: info@balancedbodybase.com

This policy is governed by the laws of Thailand, including the Personal Data Protection Act B.E. 2562 (2019).

Scroll to Top