Website Privacy Notice
Last updated: 3 August 2026
This Website Privacy Notice explains how Andalab Medical Laboratories collects, uses, stores and shares limited personal data generated when visitors access and use the Andalab website at www.andalab.net.
This notice applies only to personal data processed in connection with browsing, operating, maintaining, securing and analysing the website.
The website does not contain contact forms, online booking systems, patient portals or online access to laboratory results. It only displays contact details and links that visitors may use to communicate with Andalab by email, WhatsApp or telephone.
Communications made through email, WhatsApp or telephone take place outside the website and are not covered by this Website Privacy Notice. Personal data processed in connection with laboratory testing, sample collection, health screening or other services provided by Andalab is also outside the scope of this notice and is handled under Andalab’s separate privacy procedures and applicable legal requirements.
Personal Data Collected Through the Website
When a visitor accesses the website, limited technical and usage data may be collected automatically by the website, its hosting provider or other technical service providers.
Depending on the visitor’s device, browser settings and cookie choices, this data may include:
- Internet Protocol address
- Browser type and version
- Device type and operating system
- Date and time of access
- Pages viewed and time spent on the website
- Referring website or source
- General location information derived from an Internet Protocol address
- Cookie identifiers and similar technical identifiers
- Server logs, error records and website security information
The website does not request visitors to create an account or directly submit their name, contact details, health information or laboratory information.
Technical data collected through normal website use does not usually identify a visitor by name, although some of it may be considered personal data when it can be associated with a particular device or individual.
How Website Data Is Used
Website data may be processed for the following purposes:
- To operate, display and maintain the website
- To protect the website, its visitors and technical systems from security threats, misuse or unauthorised access
- To identify and resolve errors, technical problems and performance issues
- To understand how visitors use the website and improve its content, navigation and performance
- To produce aggregated website statistics
- To comply with applicable legal or regulatory requirements
Where permitted by applicable law, technical data necessary for operating, securing and improving the website may be processed on the basis of Andalab’s legitimate interests.
Where consent is required for optional cookies, analytics or similar technologies, those technologies will be used in accordance with the visitor’s cookie choices.
Personal data may also be processed when necessary to comply with a legal obligation.
Service Providers and International Processing
Andalab may use third-party service providers to host, maintain, secure, monitor or analyse the website.
These providers may process limited website data on Andalab’s behalf for purposes such as:
Website hosting and content delivery
Technical maintenance and performance monitoring
Website security and prevention of misuse
Error detection and troubleshooting
Website analytics, where enabled
Data backup and technical support
Some service providers, servers or technical systems may be located outside Thailand. As a result, website data may be stored or processed in other countries.
Where personal data is transferred internationally, Andalab will take reasonable steps to ensure that the transfer is handled in accordance with applicable data-protection requirements and that appropriate protections are used where required.
Andalab does not sell personal data generated through use of the website.
Cookies and Similar Technologies
The website may use cookies and similar technologies to support its operation, remember visitor preferences, protect website security and understand how the website is used.
Some cookies may be necessary for the website to function correctly. Other cookies, such as analytics or performance cookies, will be used only in accordance with the visitor’s cookie choices where consent is required.
Visitors may be able to accept, reject or manage optional cookies through the website’s cookie settings. Cookies can also be controlled or deleted through browser settings, although disabling necessary cookies may affect certain website functions.
Further information about the cookies used, their providers, purposes and retention periods is available in Andalab’s Cookie Policy.
Data Retention and Security
Website data is retained only for as long as reasonably necessary for the purposes described in this notice, including website operation, security, troubleshooting, performance analysis and compliance with applicable legal requirements.
Retention periods may vary depending on the type of data, the purpose for which it was collected and the settings or retention practices of the relevant service provider. When personal data is no longer required, it may be deleted, anonymised or securely disposed of.
Andalab takes reasonable administrative and technical measures to protect website data against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure. Visitors should therefore take appropriate precautions when using the internet and accessing external services through links displayed on the website.
Your Data Protection Rights
Subject to applicable law and any relevant conditions or exceptions, visitors may have the right to:
Request access to personal data held about them
Request a copy of their personal data
Request correction of inaccurate or incomplete personal data
Request deletion or anonymisation of personal data when there is no lawful reason to retain it
Request restriction of certain processing activities
Object to processing based on legitimate interests
Request transfer of personal data where the right to data portability applies
Withdraw consent for optional cookies or similar technologies where processing is based on consent
Submit a complaint to the Personal Data Protection Committee or another competent authority
Because website data is generally collected through technical identifiers rather than a visitor’s name, Andalab may require sufficient information to verify the requester’s identity and locate the relevant data. In some cases, Andalab may be unable to associate technical website data with a particular individual.
Requests concerning personal data generated through use of the website may be sent to:
Email: andalab@andalab.net
Andalab will consider requests in accordance with applicable law. A request may be refused or limited where permitted or required by law, and the reason will be explained where appropriate.
External Links and Contact Methods
The website may contain links to external websites, applications and communication services, including email, WhatsApp, telephone services, online maps and social media platforms.
When a visitor selects one of these links, they may leave the Andalab website or open a service operated by a third party. The third party may collect or process personal data according to its own privacy policy, terms and technical settings.
The Andalab website does not collect or store the contents of emails, WhatsApp messages or telephone calls made through contact details displayed on the website.
Once a visitor communicates directly with Andalab, any personal data contained in that communication is handled outside the website and is not governed by this Website Privacy Notice.
Andalab is not responsible for the privacy practices, security or content of external websites, applications or services. Visitors should review the relevant privacy information before providing personal data to a third party.
Changes to This Website Privacy Notice
Andalab may update this Website Privacy Notice from time to time to reflect changes to the website, technical services, data-processing practices or applicable legal requirements.
Any revised notice will be published on this page together with an updated “Last updated” date.
Visitors are encouraged to review this notice periodically to remain informed about how personal data generated through use of the website is handled.
Website Operator and Contact
For the purposes of this Website Privacy Notice, Andalab Medical Laboratories is responsible for personal data processed through the operation and use of the Andalab website.
Questions, concerns or requests relating specifically to website data may be directed to:
Andalab Medical Laboratories
260/60 Yaowarat Road
Talat Yai, Mueang Phuket
Phuket 83000, Thailand
Email: andalab@andalab.net
Phone: 086 470 5043
This contact information is provided for matters relating to the website and this Website Privacy Notice. Privacy matters concerning laboratory testing, patient records, samples, results or other services are handled separately under Andalab’s applicable laboratory privacy procedures.