Legal

Privacy policy

How The HIV Map collects, uses, and protects personal data (PDPA / GDPR).

Last updated: 2026-08-29

Website: https://thehivmap.com

TheHIVMap takes your privacy seriously. We protect personal data carefully and aim to provide services that are safe, transparent, and user-friendly. This policy explains how we collect, use, and protect your information under applicable laws including GDPR and Thailand’s PDPA.

1. Data we collect

We collect only what is needed to improve your experience.

1.1 Collected automatically

  • IP address
  • Approximate location (if you allow access)
  • Browser and operating system type
  • Pages visited
  • Referring URL

1.2 Provided voluntarily

  • Feedback or data-report forms
  • Surveys or interactive forms
  • Email messages you send to us

2. How we use data

  • Operate and improve the website and clinic directory
  • Understand aggregated usage trends
  • Respond to messages and partnership requests
  • Maintain security and prevent abuse

3. Cookies

We use necessary cookies for consent preferences and optional analytics cookies to measure aggregated traffic. You can accept all cookies or continue with necessary cookies only.

4. Sharing

We do not sell personal data. We may share limited technical data with infrastructure providers (hosting, analytics) under contracts that protect confidentiality.

5. Your rights

Depending on your location, you may request access, correction, deletion, or restriction of personal data, and withdraw cookie consent at any time.

6. Contact

Privacy questions: contact@thehivmap.com

This policy may be updated; the latest version will always be published on this page.

5. Legal bases and PDPA / GDPR

The HIV Map (https://thehivmap.com) processes limited personal data as a data controller for operating this website. Necessary cookies run to store your consent choice. Optional analytics run only after you accept all cookies. We do not require an account to read articles.

Under Thailand’s PDPA and, where applicable, GDPR, you may request access, correction, deletion, restriction, or a copy of personal data we hold, and you may withdraw cookie consent. Health information should not be sent to contact@thehivmap.com unless you choose to describe a situation yourself; we do not ask for medical records.

6. What we do not do

We do not sell personal data. We do not use contact forms as a clinic. We do not run advertising auctions on health content. Outbound links to, hospitals, or public-health sites are subject to those organisations’ policies once you leave https://thehivmap.com.

7. Hosting, logs, and security

Hosting, DNS, and media delivery providers may process IP addresses and security logs to keep the site available and to block abuse. Logs are kept only as long as needed for security and debugging. We use HTTPS and restrict access to application source folders.

8. Cookies in detail

The necessary cookie remembers whether you allowed analytics. It is not used to identify you across other sites. If you choose Necessary only, pages still work. You can clear cookies in your browser to reset the banner.

9. Children

Content may be read by anyone, but we do not knowingly collect data from children to profile them. Guardians who want a page removed can email contact@thehivmap.com.

10. Retention and international transfers

Editorial emails are kept long enough to resolve the request, then deleted or archived with limited access. Infrastructure may store data outside Thailand under contracts that require confidentiality. Analytics, when enabled, is aggregated.

11. Your choices

You can refuse optional cookies, use private browsing, and contact us to exercise PDPA rights. For a medical emergency or PEP, call 1663 or go to a hospital — do not rely on email.

12. Updates

We will publish changes on this page. Continued use after an update means the new text applies to later visits. Questions: contact@thehivmap.com.

Cookies used on this site

  • thehivmap_cookie_consent — Strictly necessary: Stores cookie consent status on this device (1 year)
  • _ga, _gid — Analytics: Anonymous aggregated traffic measurement to improve traveler guides (2 years / 24 hours)

Who The HIV Map is in this policy

The HIV Map (https://thehivmap.com) publishes traveler guides. We process the minimum needed to run the site and to read mail at contact@thehivmap.com. We are not a clinic and we do not keep medical records here.

Outbound clicks follow the other site’s policy. Typical mail we expect: clinic hours, English-speaking notes, or a broken map link.

What we collect

Messages you send, a reply address, URLs you cite, and short security logs. We do not ask for ID cards or lab files. We do not book your visit. For PEP go to emergency care within 72 hours and call 1663.

PDPA bases

Legitimate interests to operate the site; consent for analytics cookies if you accept all cookies; your request when you ask us to correct a page.

You may ask for access, correction, erasure, restriction, a copy, or to withdraw cookie consent via contact@thehivmap.com.

Cookies

Necessary cookies remember the banner choice. Refuse analytics and the guides still load. Delete cookies to see the bar again.

What we refuse

No sale of personal data, no email diagnosis, no ad auctions on health copy. Banners are booking doors, not a result guarantee.

Processors

Host, DNS, and media storage may see IPs and requested files under contract. Email systems see the body of a message to contact@thehivmap.com.

Retention and rights

Editorial mail is kept only to finish that request. Security logs rotate with the host. Rights requests go to contact@thehivmap.com with a reachable contact.

Children and emergencies

We do not profile children. PEP and emergencies: call 1663 or go to a hospital — do not wait for email.

Changes

Updates appear on this page. Booking questions belong with the clinic, because The HIV Map cannot see your queue.