Privacy Policy for 5D Facial Analysis

BSL AI Portal | BSL Clinic

BSL Clinic Co., Ltd. (the “Company”) is committed to protecting the personal data of individuals who use its 5D FACIAL ANALYSIS service, an artificial intelligence (AI)-powered system designed to provide a preliminary assessment of facial features, skin characteristics, and visible signs of facial sagging.

This Privacy Policy explains how the Company collects, uses, discloses, and processes personal data in connection with the facial analysis service, in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

1. Personal Data We Process

When you use the 5D FACIAL ANALYSIS service, the Company may process the following categories of personal data:

1.1 Facial Images

Photographs of your face that you capture or upload to the system for AI-powered preliminary analysis of your skin and facial characteristics.

1.2 Assessment Results

Information generated from the analysis of your facial images, such as visible signs of facial sagging, observable facial features, and suggested facial care programmes based on the assessment.

1.3 Technical Information

Technical information necessary for system connectivity and operation, such as your IP address, device type, and browser type.

This information is processed only during your use of the service. The Company does not record or retain this technical information in its own systems.

Facial images and assessment results may constitute sensitive personal data or information relating to an individual’s health. The Company therefore takes particular care to process such information in accordance with applicable legal requirements.

2. Purposes of Data Processing

The Company processes personal data collected through the 5D FACIAL ANALYSIS service for the following purposes:

To analyse facial images using AI and provide a preliminary assessment of skin characteristics and visible signs of facial sagging.
To display assessment results and suggest facial care programmes relevant to the characteristics identified by the system.
To process the technical information necessary for the system to function during use.

The Company will not use facial images collected through this service for advertising purposes or disclose them publicly without obtaining separate consent.

Where consent is required for any additional processing purposes, the Company will obtain the appropriate consent from the data subject before carrying out such processing.

3. Consent to Facial Image Processing

Before you begin the facial analysis, the Company will request your consent to process your facial images and related information for the purpose of generating an AI-powered assessment.

Providing consent is entirely voluntary. You may choose not to give your consent. However, without consent, you will not be able to use the facial analysis service, as the processing of this information is necessary for the service to function.

You may still contact the Company through other available channels to enquire about its services.

You may withdraw your consent at any time through the contact channels specified in Section 10.

Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

4. Disclosure of Data to an External AI Service Provider

The Company uses Claude, an AI system developed by Anthropic, through an Application Programming Interface (API) to process facial images and generate assessment results.

Information necessary to perform the assessment may be transmitted to the AI service provider’s systems, where it may be processed or stored outside Thailand.

The Company will ensure that any international transfer of personal data is carried out in accordance with applicable legal requirements, including the implementation of appropriate data protection measures.

Processing by external service providers must remain within the scope of the service’s stated purposes and the applicable data processing agreements.

5. Data Storage and Retention

The Company does not store facial images or assessment results in its own systems.

Facial images are used solely for processing during the active session. Assessment results are displayed on the user’s screen for a single viewing session and cannot be retrieved once the screen has been closed.

Any storage or retention of data by the external AI service provider, Anthropic, is governed by the terms of the service agreement under which the Company uses the provider’s services and the applicable data protection measures.

6. Communication via LINE (Optional)

After completing the facial analysis, you may choose to add BSL Clinic’s LINE Official Account to receive general information about facial care and skin-tightening options.

Adding the LINE Official Account is entirely optional and does not affect your ability to use the facial analysis service.

When you add the Company’s LINE Official Account or send a message, the Company may have access to the following information:

Your LINE display name, profile picture, and LINE user ID.
Messages, images, or other information you voluntarily share, such as screenshots of your facial analysis results.

The Company uses this information for the following purposes:

To respond to your enquiries and provide general information about facial lifting and skin-tightening options, as requested.
To arrange an appointment for a medical assessment by a physician, if you wish.
To share news, information about available programmes, and activities offered by BSL Clinic through LINE.

The Company does not separately record or store information received through LINE in its other systems and does not publicly disclose any information or images received.

Conversation histories remain on LINE’s platform, and their storage and retention are subject to LINE’s own privacy policy.

You may stop receiving messages at any time by blocking or removing BSL Clinic’s LINE Official Account from your LINE friends list.

7. Personal Data Protection Measures

The Company will implement appropriate measures to protect personal data against unauthorised access, use, disclosure, alteration, or loss.

Access to personal data will be restricted to individuals or service providers who require such access to perform their duties or fulfil the stated purposes of data processing.

8. Your Rights as a Data Subject

Under applicable personal data protection laws, you may have the following rights:

Right to Withdraw Consent: The right to withdraw consent previously given for the processing of your personal data.
Right of Access: The right to request access to and obtain copies of your personal data.
Right to Rectification: The right to request the correction of inaccurate personal data.
Right to Erasure: The right to request the deletion, destruction, or anonymisation of your personal data.
Right to Restriction or Objection: The right to request the restriction of, or object to, the processing of your personal data in circumstances prescribed by law.
Right to Data Portability: The right to receive or request the transfer of your personal data, subject to applicable legal conditions.
Right to Lodge a Complaint: The right to lodge a complaint with the relevant supervisory authority.

As the Company does not retain facial images or assessment results, certain rights may not be exercisable in relation to this information because the relevant data is no longer held in the Company’s systems.

The exercise of these rights is subject to the requirements, conditions, and exceptions provided under applicable law.

9. Changes to This Privacy Policy

The Company may update this Privacy Policy from time to time to reflect changes in its systems, technology, or applicable legal requirements.

The latest version of this Privacy Policy will be made available through the Company’s official communication channels.

If the Company introduces new purposes for processing personal data that require additional consent, it will obtain such consent in accordance with applicable law before carrying out the relevant processing activities.

10. Contact Information for Personal Data Enquiries

The Company primarily communicates important information and updates to users through its online channels.

If you experience difficulties using the service or have general enquiries, you may contact the Company’s staff through BSL Clinic’s official Facebook page or LINE Official Account.

For enquiries relating to personal data, withdrawal of consent, or the exercise of your rights under applicable data protection laws, please contact:

BSL Clinic Co., Ltd. (BSL Clinic)

Website: https://www.bslclinic.com
Facebook: https://www.facebook.com/bslclinic/
LINE Official Account: @bslclinic
Email: [email protected]

Address for Personal Data Enquiries:
30/8 Sala Daeng Road (Sala Daeng Soi 2), Si Lom, Bang Rak, Bangkok 10500, Thailand

Clinic Locations

BSL Clinic (Sukhumvit Branch)
Times Square Building, Room 114, Ground Floor
246 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand

BSL Clinic (Silom Branch)
30/8 Sala Daeng Road (Sala Daeng Soi 2)
Si Lom, Bang Rak, Bangkok 10500, Thailand

Announced on: 15 October 2026