Privacy Policy
Last updated: January 2025
Introduction
At Udaya, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our programs.
Information We Collect
We may collect the following types of information:
Personal Information
- Name and contact details (email, phone number, address)
- Date of birth and identification information
- Emergency contact information
- Passport or ID details (for retreat participants)
Health Information
- Medical history and current health conditions
- Current medications and treatments
- Allergies and dietary restrictions
- Mental health information relevant to program participation
- Treatment outcomes and progress notes
Automatically Collected Information
- IP address and browser type
- Device information
- Website usage data and analytics
- Cookies and similar tracking technologies
How We Use Your Information
We use your information for the following purposes:
- To assess your eligibility for our programs
- To provide medical cannabis treatment and supportive care
- To communicate with you about your participation
- To comply with legal and regulatory requirements
- To improve our services and programs
- To ensure your safety and well-being during retreats
- For research purposes (with your consent and anonymized)
Information Sharing and Disclosure
We may share your information with:
- Licensed medical professionals involved in your care
- Thai health authorities as required by law
- Emergency services in case of medical emergencies
- Service providers who assist in our operations (under strict confidentiality agreements)
- Legal authorities when required by law or court order
We will never sell your personal information to third parties.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of sensitive data in transit and at rest
- Secure servers and databases
- Limited access to personal information on a need-to-know basis
- Regular security assessments and updates
- Staff training on data protection and confidentiality
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Medical records are retained in accordance with Thai healthcare regulations.
Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information (subject to legal requirements)
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
- Withdraw consent where processing is based on consent
International Data Transfers
If you are accessing our services from outside Thailand, please be aware that your information may be transferred to, stored, and processed in Thailand where our facilities are located. By using our services, you consent to this transfer.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: team@udaya.one
Phone: +1 (647) 773-0296
Address: Prachuap Khiri Khan Province, Thailand