Privacy Policy
Last updated 2 October 2026
Healthy Club is a Mae Sai Hospital system for registering for wellness events and recording exercise by hospital and district healthcare network staff. This policy explains what the system collects, why, who can see it and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
What we collect
- Account: the name and email of the Google account you sign in with. The system never sees or stores your Google password.
- Profile details you enter: display name, first and last name, nickname, date of birth, phone number and profile photo.
- Event registrations: name, phone, email, chosen distance or group, BIB number, registration status and check-in.
- Exercise: entries you add yourself and, if you choose to connect, activities from Strava such as date, distance and duration.
- Consent: the version of the consent text and when you agreed.
How we use it
- To run events, confirm registrations, assign BIB numbers and check people in.
- To show your own exercise summary under "My account".
- To contact you about events you registered for.
We do not sell your data or use it for advertising.
Who can see it
- You: your own profile, registrations and exercise records, which you can edit.
- Event staff: registrant details for events they manage, for running the event and check-in.
- Site visitors: participant lists show only BIB number, name, nickname, status and registration time, never phone or email.
- Profile and self-entered activities: private by default. You can choose to share them with members or the public. Activities from Strava are always private to you.
Strava connection
Strava is connected only after you approve it on Strava's own page. The system never sees your Strava password. Access tokens are kept on the server, not in your browser.
- Data received from Strava is shown only to you. It is not shown to other users or staff and is not included in any organisational report, in line with the Strava API Agreement.
- You can disconnect at any time under "My account". The system then revokes access with Strava and deletes all activities imported from Strava.
- Healthy Club is a Mae Sai Hospital system. It is not developed, sponsored or endorsed by Strava.
Storage and security
- Data is stored in the system's cloud database and sent over encrypted connections (HTTPS).
- Row-level access rules let each user read and change only their own records.
- Profile photos are kept in non-public storage.
- Data is kept only as long as needed for events and staff health care. When you ask, it is deleted or de-identified unless the law requires us to keep it.
Cookies and browser storage
The system uses browser storage to keep you signed in and to remember your text-size setting. Google sign-in uses Google's cookies under Google's policies. We do not use advertising or cross-site tracking cookies.
Your rights
You may request access, a copy, correction, deletion or restriction of your data, or withdraw consent. You can edit your profile and delete self-entered activities under "My account"; for anything else, contact the Mae Sai Hospital system administrators. Withdrawing consent does not affect processing carried out before then.
Data controller
Mae Sai Hospital, Chiang Rai, Thailand.