Privacy Policy

Effective Date: 1 June 2025  |  Last Updated: 1 June 2025

This Privacy Policy applies to the website hitomorrowthailand.net (the “Website”), operated by Daily Life TH (legal entity: SAAD HEALTHCARE SOLUTIONS LLC) (collectively referred to herein as “we,” “us,” or “our”). We are committed to protecting the privacy and personal data of every individual who visits or interacts with our Website.

This policy has been prepared in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand, which is the primary legislative framework governing the collection, use, disclosure, and transfer of personal data in Thailand. We encourage you to read this policy carefully so that you understand how we handle your personal information and what rights you have under applicable law.

By accessing or using the Website, submitting any form, or continuing to browse our pages, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the Website.

1. Who We Are and How to Contact Us

The data controller responsible for your personal data is:

• Trading Name: Daily Life TH
• Legal Name: SAAD HEALTHCARE SOLUTIONS LLC
• Website: hitomorrowthailand.net
• Email: [email protected]
• Phone: +13187053148
• Address: 817 Tech Dr, Lynn Haven, Florida, 32444-3135, United States

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the details above. We aim to respond to all legitimate privacy inquiries within 30 days of receipt.

2. Scope of This Policy

This Privacy Policy covers all personal data collected through:

• Our Website at hitomorrowthailand.net and any subdomains;
• Contact forms and enquiry forms hosted on the Website;
• Cookies and similar tracking technologies placed on your device when you visit the Website;
• Any email correspondence or telephone communications you initiate with us.

This policy does not cover third-party websites that may be linked from our Website. We encourage you to review the privacy policies of any external websites you visit, as we have no control over their data practices.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as certain data collected automatically when you use our Website. The categories of personal data we collect include:

3.1 Data You Provide Directly

When you complete a contact form or enquiry form on the Website, we collect the following information:

• Full Name: To identify you and address you appropriately in our communications.
• Email Address: To respond to your enquiry or send requested information.
• Phone Number: To contact you by telephone if required or requested.
• Message / Enquiry Content: The substance of your question, comment, or request, which may incidentally contain additional personal details you choose to share.

We do not require you to provide sensitive personal data (as defined under the PDPA, including health information, financial data, racial or ethnic origin, political opinions, religious beliefs, criminal records, or biometric data) through our Website. Please refrain from including sensitive personal data in any free-text fields unless it is strictly necessary for your enquiry, and only do so with the understanding that it will be handled with the highest level of care.

3.2 Data Collected Automatically

When you visit our Website, certain technical information is collected automatically through your browser and our server infrastructure, including:

• IP Address: Your internet protocol address, which may be used to determine approximate geographic location;
• Browser Type and Version: The web browser you are using (e.g., Chrome, Safari, Firefox);
• Operating System: The operating system of your device;
• Pages Visited: The specific pages of our Website you navigate to and the order in which you visit them;
• Referral URL: The webpage from which you arrived at our Website;
• Date and Time of Visit: Timestamp of your access sessions;
• Device Identifiers: Information about the device you use to access the Website.

This automatically collected data is used to maintain the security and functionality of the Website, to analyse traffic patterns, and to improve the overall user experience.

4. How We Process Your Form Submissions

When you submit a contact form on the Website, your data is processed as follows:

1. Your form submission is transmitted securely over an encrypted connection (HTTPS/TLS) to our web server.
2. The data is received by our server-side application and formatted into an email notification, which is delivered to our designated internal inbox.
3. Your submission details (name, email, phone, message) may also be stored temporarily in our server logs or a secure database to ensure we do not lose your enquiry.
4. A member of our team reviews your message and contacts you via the email address or telephone number you provided.
5. Your data is retained for the period specified in Section 9 of this policy, after which it is securely deleted or anonymised.

We do not use automated decision-making or profiling in relation to form submissions. All enquiries are reviewed and responded to by a human member of our team.

5. Legal Basis for Processing

Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA), we must have a lawful basis for processing your personal data. Depending on the context, we rely on the following legal bases:

• Consent (Section 19, PDPA): Where you have provided your explicit consent — for example, when submitting a contact form or accepting optional analytics cookies — we process your data on the basis of that consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legitimate Interests (Section 24(5), PDPA): We process certain automatically collected technical data (such as IP addresses and server logs) on the basis of our legitimate interests in maintaining the security, integrity, and functionality of our Website. We have assessed that our legitimate interests are not overridden by your fundamental rights and freedoms.
• Contractual Necessity: Where you request specific services or information, we process your data as necessary to take steps at your request prior to entering into or fulfilling a contractual arrangement.
• Legal Obligation: We may process or retain certain data to comply with applicable Thai laws and regulations, including tax, accounting, and record-keeping obligations.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies help us recognise your preferences and improve your experience.

6.1 Types of Cookies We Use

• Strictly Necessary / Functional Cookies: These cookies are essential for the Website to operate correctly. They enable core functionality such as page navigation, form submission security (CSRF tokens), and session management. These cookies cannot be disabled without significantly impairing the functionality of the Website. No consent is required for strictly necessary cookies.
• Analytics Cookies (Optional): With your consent, we may use analytics cookies to understand how visitors interact with our Website — for example, which pages are most visited, how long users spend on the site, and where visitors navigate from. This data is aggregated and anonymised where possible. If you decline analytics cookies, we will not use them, and your visit will not be tracked for analytical purposes.

6.2 Managing Your Cookie Preferences

When you first visit our Website, you may be presented with a cookie consent notice. You can accept or decline optional cookies at that time. You may also manage cookie settings at any time through your browser settings. Most browsers allow you to:

• View which cookies are stored on your device and delete them individually;
• Block third-party cookies;
• Block all cookies from specific websites;
• Block all cookies from being set;
• Delete all cookies when you close your browser.

Please note that if you disable cookies, some features of the Website may not function as intended. For guidance on managing cookies in your specific browser, visit the browser manufacturer's help pages.

6.3 Cookie Retention

Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for the duration specified in the cookie itself — typically between 30 days and 24 months, depending on the purpose of the cookie.

7. Third-Party Services and External Resources

Our Website may load resources from certain trusted third-party providers. Please be aware that when your browser requests resources from these external providers, a connection is made to their servers, and your IP address and browser information may be shared with them in accordance with their own privacy policies.

7.1 Google Fonts

We use Google Fonts, a service provided by Google LLC (or Google Ireland Limited for EEA users), to load web fonts that improve the visual presentation of our Website. When you visit a page that uses Google Fonts, your browser may send a request to Google's servers, which may result in Google collecting your IP address. Google's use of this data is governed by the Google Privacy Policy, available at https://policies.google.com/privacy. We do not control Google's data practices and recommend you review their policy directly.

7.2 Tailwind CSS CDN

Our Website may load the Tailwind CSS stylesheet from a content delivery network (CDN). When your browser fetches this file, a connection is established with the CDN provider's servers, and your IP address may be logged by the CDN operator. We use CDN resources solely for website styling purposes and do not receive any personal data from these connections.

7.3 Email Service Providers

Form submissions from our Website are processed and delivered via email infrastructure that may involve third-party email service providers. These providers process your submission data solely as data processors acting on our instructions, under contractual obligations that ensure your data is protected.

7.4 Web Hosting

Our Website is hosted on servers operated by a third-party web hosting provider. This provider stores and transmits the data associated with your use of the Website on our behalf. Our hosting provider acts as a data processor and is bound by contractual obligations to maintain appropriate security standards.

8. How We Use Your Personal Data

We use the personal data we collect for the following specific and legitimate purposes:

• Responding to Enquiries: To read, review, and respond to messages submitted through our contact forms;
• Customer Service: To provide support, answer questions, and resolve any issues you raise with us;
• Internal Record-Keeping: To maintain accurate records of communications and enquiries for business administration purposes;
• Website Improvement: To analyse usage patterns and improve the content, design, and performance of our Website;
• Security and Fraud Prevention: To monitor for suspicious activity, protect against malicious use of our Website, and ensure the integrity of our systems;
• Legal Compliance: To meet our obligations under applicable Thai law, including the PDPA, and to respond to lawful requests from regulatory authorities or courts;
• Direct Communications: Only where you have provided explicit consent, to send you relevant information about our services, updates, or promotions.

We will not use your personal data for purposes incompatible with those described above without first obtaining your consent or establishing another lawful basis for such use.

9. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable Thai law. Our standard retention periods are as follows:

• Contact Form Submissions: Data submitted through our contact forms (name, email, phone, message) is retained for a period of 3 years from the date of submission, or for as long as is necessary to respond to and resolve your enquiry, whichever is longer. After this period, data is securely deleted or anonymised.
• Server and Access Logs: Technical log files (including IP addresses and access records) are retained for a maximum of 12 months for security and diagnostic purposes, after which they are deleted.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely, as it no longer constitutes personal data. Where analytics data is associated with identifiable information, it is anonymised or deleted within 26 months.
• Cookie Data: As described in Section 6.3 above.

Where we are required by law — for example, under Thai accounting, tax, or consumer protection regulations — to retain certain records for a specified period, we will comply with those legal retention requirements even if the period exceeds our standard retention schedule.

Upon expiry of the applicable retention period, personal data will be securely destroyed, erased, or anonymised in accordance with industry best practices.

10. Disclosure of Your Personal Data

We do not sell, rent, or trade your personal data to any third parties. We may share your personal data in the following limited circumstances:

• Service Providers (Data Processors): We share data with trusted third-party service providers — such as web hosting companies, email infrastructure providers, and IT support personnel — who assist us in operating the Website and providing services to you. These parties are bound by contractual obligations to process your data only on our instructions and to implement appropriate security measures.
• Legal Obligations: We may disclose your personal data if required to do so by law, court order, or lawful request from a government authority or regulator in Thailand or another jurisdiction with jurisdiction over us.
• Protection of Rights: We may disclose personal data where we believe disclosure is necessary to protect our legal rights, enforce our terms and conditions, or protect the safety of our employees, users, or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of our business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice before your personal data becomes subject to a different privacy policy.

11. International Data Transfers

Our primary operations are based in Thailand. However, some of the third-party service providers we use (including web hosting, email delivery services, and CDN providers such as those delivering Google Fonts or Tailwind CSS) may store or process your data on servers located outside of Thailand.

Under the Thailand PDPA (Sections 28–29), the transfer of personal data to a foreign country is permitted only if the destination country has adequate personal data protection standards, or if appropriate safeguards are in place (such as the data subject's consent, contractual necessity, or standard contractual clauses equivalent to those recognised by Thai authorities).

Where your data is transferred internationally, we take steps to ensure that your data receives an equivalent level of protection as it does in Thailand, including:

• Entering into data processing agreements that include standard contractual protections;
• Only working with third-party providers that maintain recognised security certifications and privacy compliance programmes;
• Obtaining your explicit consent for any international transfer where required by the PDPA and where other safeguards are not available.

If you would like further information about the safeguards we use for international data transfers, please contact us using the details in Section 1.

12. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and our Website is encrypted using TLS (Transport Layer Security) via HTTPS, ensuring that data sent through forms and page visits is protected from interception.
• Access Controls: Access to personal data stored on our systems is restricted to authorised personnel on a need-to-know basis. We implement role-based access controls and require strong authentication credentials.
• Secure Infrastructure: Our Website is hosted on servers that comply with industry-standard security protocols, including firewalls, intrusion detection systems, and regular security patching.
• Regular Security Reviews: We periodically review and update our security practices to address emerging threats and vulnerabilities.
• Staff Awareness: Personnel who handle personal data are trained on data protection obligations and our internal privacy policies.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant Thai regulatory authority (Office of the Personal Data Protection Committee – PDPC) in accordance with the requirements of the PDPA.

13. Your Rights Under the Thailand PDPA

As a data subject under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights with respect to your personal data:

• Right to be Informed (Section 23): You have the right to be informed about how your personal data is collected, used, and disclosed. This Privacy Policy fulfils our obligation to inform you.
• Right of Access (Section 30): You have the right to request access to the personal data we hold about you and to receive a copy of that data, along with information about how it is processed.
• Right to Data Portability (Section 31): You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller where technically feasible and where the processing is based on your consent or on a contract.
• Right to Rectification (Section 35): You have the right to request that we correct any inaccurate, incomplete, misleading, or out-of-date personal data we hold about you.
• Right to Erasure / Right to be Forgotten (Section 33): You have the right to request that we delete or destroy your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), where you object to processing and there are no overriding legitimate grounds, or where the data has been unlawfully processed.
• Right to Restriction of Processing (Section 34): You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while we assess an objection you have raised.
• Right to Object (Section 32): You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where you believe your fundamental rights override those interests.
• Right to Withdraw Consent (Section 19): Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), the supervisory authority in Thailand, if you believe we have processed your personal data in violation of the PDPA. Contact information for the PDPC is available at the official Thai government website.

To exercise any of these rights, please contact us at [email protected] or using the contact details in Section 1. We will respond to verified requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, and we will notify you of any extension and the reasons for it.

We may need to verify your identity before processing your request to ensure that we do not disclose your data to an unauthorised party. We will not charge a fee for exercising your rights unless your request is clearly unfounded or excessive.

14. Children's Privacy

Our Website and services are not directed at, and are not intended for use by, children under the age of 20 years (reflecting the age of majority in Thailand). We do not knowingly collect personal data from individuals under 20 years of age.

Under the PDPA, where a data subject is a minor (under 20 years old and not emancipated), the consent of their parent or legal guardian is required for the collection, use, or disclosure of their personal data. We do not design our Website's features to appeal to or engage minors, and our contact forms are not intended for use by persons under 20.

If you are a parent or guardian and you believe that your child has submitted personal data to us without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such data from our records upon verification of your request.

15. Links to Third-Party Websites

Our Website may contain links to external websites, social media platforms, or other online resources that are operated by third parties. These links are provided for your convenience and informational purposes only. We do not control third-party websites and are not responsible for their content, privacy practices, or data handling procedures.

When you click on a link to a third-party website, you will leave our Website, and any information you provide on that external site will be subject to that site's own privacy policy. We strongly encourage you to review the privacy policy of any website you visit before submitting any personal information.

16. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law (including updates to the PDPA or related regulations issued by the PDPC), or the nature of our services. All updates will be effective from the date indicated at the top of the revised policy.

When we make material changes to this policy, we will notify you by:

• Posting the revised policy on this page with an updated “Last Updated” date;
• Displaying a prominent notice on our Website's homepage or contact page for a reasonable period following the update;
• Where we hold your email address and the changes are significant, sending you a notification email to the address you provided.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Website after the posting of changes constitutes your acknowledgement of and agreement to the updated policy (to the extent permitted by applicable law).

17. Consent and Legal Compliance Statement

We are committed to full compliance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand and any subordinate regulations, notifications, and guidelines issued thereunder by the Office of the Personal Data Protection Committee (PDPC). We will continue to monitor developments in Thai data protection law and update our practices accordingly.

Where our processing activities require prior consent under the PDPA, we will obtain that consent in a clear, specific, and unambiguous manner, separate from other terms and conditions, and we will maintain records of consent as required. We will not make the provision of services conditional on your consent to non-essential data processing.

We appoint or designate internal personnel responsible for data protection compliance and are prepared to cooperate with the PDPC in the event of any inquiry, investigation, or audit relating to our data processing activities.

18. Contact for Privacy Inquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about the way in which we have handled your personal data, please contact our privacy team:

• Company: Daily Life TH
• Legal Entity: SAAD HEALTHCARE SOLUTIONS LLC
• Email: [email protected]
• Phone: +13187053148
• Postal Address: 817 Tech Dr, Lynn Haven, Florida, 32444-3135, United States

We are committed to addressing your concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the Office of the Personal Data Protection Committee (PDPC), the competent supervisory authority in Thailand.

This Privacy Policy was last reviewed and updated on 1 June 2025. It is effective as of that date and supersedes all previous versions. © Daily Life TH (SAAD HEALTHCARE SOLUTIONS LLC). All rights reserved.