Privacy Notice

1. Who we are

TRM Solution Co., Ltd. is the data controller and the operator of the SRC (Structural Rehab Care) platform at srcth.com, which comprises a learning centre for the public and physiotherapists, and software for physiotherapy clinics.

2. Scope of this notice

3. What we collect from the website

If you only browse, we ask nothing personal of you. We collect data only in these cases:

• What you type into a contact or trial-request form: name, email, phone, clinic or organisation name, and the message you write to us
• Technical data your visit records automatically for security and troubleshooting, such as IP address, browser type, and time of access

4. Cookies

We use only the cookies the site needs to work: one that remembers your language choice, and one that keeps you signed in. We currently run no advertising cookies, no cross-site tracking, and no third-party analytics. If that ever changes, we will tell you and ask for your consent first.

5. How we use your data, and our legal basis

• To reply as you asked — booking a demo, or telling you when a service opens (consent, given when you submit the form)
• To provide the service we agreed on and maintain your account (performance of a contract)
• To keep the system secure, prevent misuse, and improve our service (legitimate interest)

We do not sell your data to third parties, and we do not use it for advertising.

6. Disclosure and external providers

We use providers only as far as running the service requires: cloud/infrastructure for storage, and a payment provider for paid services. All are contractually bound to keep your data confidential and to process it only on our instructions. Beyond that, we disclose data only where the law requires it.

7. Retention

Form submissions are kept as long as needed to reply and serve you, and deleted on request. Account data is kept while you use the service and as long as the law requires, then deleted or anonymised.

8. Your rights under the PDPA

You may access and obtain a copy of your data, have it corrected, deleted, or restricted, object to processing, ask for it to be ported, and withdraw consent at any time. Contact us using the details below and we will act within 30 days. If you are unhappy with the outcome, you may complain to Thailand's Personal Data Protection Committee.

9. Data security

Stored on secure cloud infrastructure, encrypted in transit and at rest, access restricted by role, with periodic backups.

10. Health content on this site

11. Minors and changes to this notice

This service is intended for adults; minors should use it under a guardian's consent. We may update this notice from time to time, with the latest date shown above. If a change is material, we will announce it on the website.