This Terms of Service and Privacy Policy for the OCTO application have been prepared by Thonburi Healthcare Group Public Company Limited ("the Company") to clarify the practices regarding the management of personal information of all users who register to use the OCTO application. For the benefit and understanding of using the OCTO application services provided by the company, you are requested to read to thoroughly understand these terms and policies.

By registering to use the OCTO application services, it is understood that you acknowledge and agree to be bound by all the terms and conditions of this policy. Any definitions that appear in these application service terms and privacy policy shall be as defined in the OCTO service conditions.

1. Personal Data Collection

OCTO provides software for the exchange of information, opinions, knowledge, and experiences related to various fields, not limited to the medical sector or current research data. This also includes organising activities or services of interest to members of this online community.

To facilitate these services, OCTO needs to collect and store your personal data, which is information collected directly from you and/or your affiliated hospitals.

• Identifiable information such as name, surname, photograph, gender, date of birth, and national identification number
• Contact details like phone numbers and email addresses
• Statistics such as application usage
• Data from your use of our application, like IP addresses and cookies
• Feedback or suggestions
• Registration details needed to create user accounts such as national identification number, email address, phone number, and password
• Public information displayed on social media profiles to facilitate registration via the OCTO application account

OCTO will retain your personal data as long as you are employed by the company or your associated hospitals. Upon termination of your employment, OCTO will delete or anonymize your personal data.

2. Circumstances of Personal Data Collection

2.1 Upon registering for services

2.2 While using the services

2.3 When contacting our support team

2.4 Through your activities within the OCTO application, including clicks, likes, posts, pictures, and messages sent

2.5 Regarding your friends and followers and their activities within the OCTO application

3. Consent for Use of Personal Data

3.1 When you register for any of OCTO's services, you are agreed to provide consent to OCTO collecting, compiling, and using your data solely for the purposes of providing services as specified in the service terms and as outlined in this privacy policy.

3.2 OCTO will use your personal data for the following benefits:

• To identify you
• To benefit service provision
• To promote services or announce changes to the services
• To assist and solve any technical or service-related issues
• To comply with legal requirements
• To communicate with you
• To deliver targeted promotional materials to you

To ensure OCTO achieves its objectives in maintaining the confidentiality of your personal data, you are obligated to keep your password confidential and immediately inform the central human resources department or use the contact methods specified in section 13 if you become aware of any unauthorised use of your password.

5. Data Collection from Third Parties

In the event that you provide information about third parties to OCTO, you warrant that you have acted with the necessary rights or explicit permission from the data owner to do so, and you authorise OCTO to store, collect, use, and copy such information within the bounds set forth in this privacy policy. You are responsible for informing the third party about these actions and the privacy policy yourself. OCTO is not liable to the third party for any consequences and has no obligation to notify the third party about such actions.

Your personal and confidential information is of utmost importance. OCTO will not disclose your personal information to any external individuals or organisations for any purpose, unless it has your consent or is required by law, such as complying with court orders or legal subpoenas.

7. Use of Non-Personal Data

By registering to use OCTO's services, you authorise OCTO to access or use your non-personal data for the following purposes: to help us understand how you use our services, to provide additional information to users about the operation and benefits of using our services, and to assist in supporting and enhancing the efficiency and effectiveness of our business.

8. Data Protection Standards

OCTO strictly maintains security standards to protect against damage or unauthorised access to your personal data. OCTO uses cloud database systems with security protections that meet international standards. The application employs SSL encryption to ensure the security of data transmission between the application and the database system.

9. Use of Cookies

Cookies" are small computer files that are installed on your computer to facilitate the recognition of applications you have previously visited. Cookies cannot be used to personally identify you or hold information specifically related to you; they can only identify your computer. OCTO uses cookies, and once they are installed on a user's computer system, they enhance the user's convenience in using the OCTO application. This is because cookies remember the patterns of the user's activity. Additionally, OCTO uses the data stored or collected by cookies for statistical analysis, advertising, and promotional displays, or other application activities to improve service quality. You have the right to refuse the use of cookies, but be aware that doing so may prevent you from utilising certain functions or features of the OCTO application.

10. Control Over Personal Data

For the purpose of maintaining your privacy, you have the right to choose whether to allow the use or sharing of your personal data. You may also opt not to receive any marketing information or media from the application. Simply express this preference to inform OCTO via the various communication channels available on the application interface.

11. Privacy Concerns

If you have any issues, concerns, suggestions, or feedback regarding the privacy policy or its implementation, OCTO is willing to address your questions, listens to your suggestions, and accepts your feedback, all of which are valuable for improving our services. You can contact OCTO through the various channels as specified on the application.

12. OCTO reserves the right to update or amend its privacy policy without prior notification, in order to ensure appropriateness and efficiency in service provision. Therefore, it is recommended that users review the privacy policy each time they visit or use services from the OCTO application.

13. Information about the Data Controller and the Data Protection Officer

13.1 Data Controller: Central Human Resources Department

13.2 For inquiries related to personal data protection, please contact 02-220-7999 ext. 85331, Monday to Friday, 8:30 AM to 5:30 PM, or email hr@thg.co.th.