Cloud Nine Thailand Privacy Policy

Effective Date: 1st August 2025

1. Introduction

Cloud Nine Thailand (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with Thailand’s Personal Data Protection Act (PDPA) and the Department of Thai Traditional and Alternative Medicine (DTAM) telemedicine regulations.

This policy applies to all interactions with Cloud Nine Thailand, including:

  • In-store purchases at our licensed cannabis dispensaries

  • Telemedicine consultations with licensed Thai Traditional Medicine (TTM) doctors

  • Online forms, website visits, and customer support communications

2. Types of Data We Collect

2.1 Identity Information

  • Name, date of birth, gender, passport or Thai ID number, nationality

  • Copy of identification document (for age and prescription verification)

2.2 Contact Information

  • Address, phone number, email, preferred contact method

  • Messaging app IDs (e.g., LINE, WhatsApp)

2.3 Medical Information (collected only for telemedicine and medical cannabis services)

  • Medical history, allergies, current medications, lifestyle habits

  • Details about your health condition relevant to treatment

  • Telemedicine session notes and prescriptions issued by licensed doctors

2.4 Technical Information

  • IP address, browser type, device information, and website usage data

3. Purpose of Data Collection

We collect and use your personal data for the following purposes:

  • Legal compliance with PDPA and DTAM requirements for licensed cannabis sales and telemedicine services

  • Identity verification to confirm legal eligibility (20 years+ and valid prescription)

  • Medical assessment by a licensed TTM doctor before cannabis prescription

  • Service delivery, including booking appointments, providing products, and processing payments

  • Safety and security — including fraud prevention and incident response

  • Customer communication, updates, and support

  • Marketing (only with your explicit consent)

4. Legal Basis for Processing

We process your personal data based on:

  • Explicit consent for medical and sensitive personal data

  • Contractual necessity to provide products and services you request

  • Legal obligations under Thai cannabis and telemedicine laws

  • Legitimate interests such as service improvement and fraud prevention

5. Data Retention

  • Medical records are retained for 3 years from the date of your last consultation, in line with DTAM requirements.

  • Other personal data may be retained for up to 10 years for legal, tax, or business purposes, unless you request deletion earlier.

6. Data Sharing & Transfers

We may share your personal data with:

  • Licensed TTM doctors for prescription approval

  • Payment processors and financial institutions

  • Government authorities when required by law

  • IT service providers for secure data hosting and telemedicine platform operation

  • Overseas partners only when necessary, and with adequate PDPA-compliant safeguards

7. Data Security

We use industry-standard security measures including:

  • Data encryption in transit and at rest

  • Access controls and role-based permissions

  • Secure telemedicine platforms compliant with DTAM standards

  • Regular security audits and staff training on privacy obligations

8. Your Rights Under PDPA

You have the right to:

  • Access and request a copy of your personal data

  • Correct or update your personal data

  • Withdraw consent at any time (note: this may affect your ability to receive services)

  • Request deletion of your data, subject to legal retention requirements

  • Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC)

Requests can be submitted via:
📧 Email: DPO@cloudninethailand.com
📞 Phone: +66 08 0643 3420

9. Cookies and Tracking

We use cookies to improve website functionality, enhance user experience, and analyze site traffic. You can adjust your browser settings to refuse cookies, but some site features may not function properly.

10. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Updates will be posted on our website with the new effective date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

Cloud Nine Thailand – Data Protection Officer (DPO)
📧 Email: DPO@cloudninethailand.com
📞 Phone: +66 08 0643 3420
📍 Address: 221 Sukhumvit Rd, Khlong Toei Nuea, Watthana, Bangkok 10110