Privacy Policy
1. Who handles your data
FGC Co., Ltd. is the controller for enquiries, owner accounts, service administration, billing, website measurement and security information it uses for its own purposes. A business using PorThorOS normally controls the employee, customer, patient and transaction records it submits; FGC processes those records on its instructions. Contact hello@porthoros.com or the registered address above for privacy questions or rights requests.
2. Information and sources
We receive contact and business details from you, account administrators and support communications; business records from authorized users and integrations; and device, browser, IP address and activity information from service use. Submitted records may include staff details, sales, stock, supplier records and patient or prescription information where the business uses those features. Provide only information needed for the relevant task.
3. Purposes, legal bases and required fields
We use account and contact information to respond to requests and perform our contract; billing and legally required records to meet legal obligations; and proportionate security and diagnostic information for legitimate interests in protecting the service. Optional marketing emails and public-site analytics rely on consent. Required account or billing information is necessary to supply the requested service; without it we may be unable to open or support the account. Optional newsletter and shop details are not required to use the free report generator.
4. Patient and prescription records
Health and prescription information can be sensitive personal data. The business collecting it must establish the applicable legal basis, provide required notices and obtain explicit consent where required by law or identify an applicable legal exception. Accepting our terms is not patient consent. FGC processes business-submitted patient data on documented instructions; avoid sending patient documents through ordinary marketing, newsletter or general enquiry channels.
5. Recipients and overseas processing
Data may be disclosed as necessary to hosting, storage, communications, support and security providers, professional advisers, or authorities where lawfully required. This public site uses Resend for optional email updates and Google Analytics and Meta for consent-based measurement. These providers may process data outside Thailand. Transfers must use the safeguards or other lawful transfer grounds required by applicable law. Contact us for information about providers and processing locations relevant to your service; these website providers are not a complete list of SaaS subprocessors.
6. Retention and deletion
Retention depends on purpose rather than a single period for all data. Account records are retained for service delivery and closure; billing records for applicable tax and accounting duties; support and security records while needed to resolve requests, investigate incidents or handle legal claims. Email subscriptions are retained while subscribed; limited consent and suppression records may remain to demonstrate choices and prevent unwanted mail. Business records follow the customer’s instructions and applicable legal duties. When the relevant purpose and lawful retention need end, data is deleted or anonymized; restricted backup copies follow the applicable backup deletion cycle. Contact us for the schedule applicable to your account.
7. Your rights and requests
Subject to applicable law, you may request access, copies, information about data sources, correction, deletion, restriction or portability; object to relevant processing; withdraw consent; or complain to the Personal Data Protection Committee. Email hello@porthoros.com with your request and enough information to identify the relevant account. We may verify your identity proportionately and will respond within applicable legal time limits. For records controlled by a shop or clinic, contact that business; we will assist it with requests concerning data we process for it. Withdrawal does not invalidate earlier lawful processing.
8. Cookies, browser storage and choices
The public site stores your language and analytics choices in local storage until you change them or clear browser storage. The business app may use essential session and security cookies. Optional Google Analytics and Meta Pixel load on the public site after analytics consent. You can reject or change that choice through Analytics settings in the footer; browser controls can also remove stored cookies. Cookie expiration and provider-side data retention are separate and may depend on provider settings.
9. Google and Meta measurement
Google Analytics measures page visits and tool actions using browser identifiers, usage and device information; Google documents a default two-year lifetime for its _ga cookies, which settings or browsers may shorten. Meta Pixel measures visits and advertising attribution and may set identifiers such as _fbp and _fbc. If server-side Meta measurement is enabled, a consented page view also sends the page path, event identifier, IP address and browser user agent through our server. Newsletter emails, shop details and report entries are not included in our configured analytics events. Google and Meta apply their own privacy and cookie policies to their processing.
10. Free tools and optional emails
The free PT27/PT28 generator keeps report entries in your browser. If you separately choose email updates, we use Resend to store your signup email, any optional shop name or Google Maps link you provide, language, and consent/confirmation details and to send a confirmation email. Optional shop details help us identify your business and understand who uses the tool. We send PT reporting tips and PorThorOS product updates only after confirmation. Report entries are not included, and your email and shop details are not sent to analytics. You can unsubscribe through the link in update emails or request deletion at hello@porthoros.com. Browser report data is not a server backup; save or print the records you need before closing or resetting the tool.
11. Security and incident handling
Access to personal data must be limited to authorized purposes and personnel. FGC must apply security measures appropriate to the data and risk, investigate incidents and make notifications required by applicable law and customer agreements. No website or service can promise absolute security. Report a suspected data incident privately to hello@porthoros.com without including unnecessary patient information.
12. Updates to this notice
The version date identifies the current notice. Material changes will be communicated through an appropriate service or contact channel where required, and fresh consent will be requested when legally necessary. Changes to this notice do not by themselves authorize a new incompatible use of personal data.
Website provider policies
Google Privacy · Google Analytics cookies · Meta Cookies · Resend Privacy
