Who we are Aion Health is a preventive health program based in Thailand, operated by Kairos Ventures Co., Ltd. (“Aion Health”, “we”, “us”). We provide personalized biomarker analysis, health protocols, and longitudinal tracking services to our members. If you have any questions about this policy, contact us at: Email: hello@aionhealth.co WhatsApp: +66 65 526 4369
What data we collect and why
We collect only the information necessary to deliver your membership and personalize your health analysis.
Identity and contact information
Your name, date of birth, biological sex, and contact details (email, phone number, and messaging accounts). We use this to identify you, communicate with you, and apply age- and sex-appropriate reference ranges to your biomarker results.
Health and lifestyle information
Your health goals, lifestyle habits, current supplements, medications, and relevant medical history. We use this to contextualize your biomarker results and generate personalized recommendations.
Biomarker and laboratory results
Blood test results produced by our certified laboratory partner, N Health (a BDMS affiliate). We use this as the foundation of your personalized health analysis and to track your progress over time.
Payment information
Payment is processed through third-party payment providers. Aion Health does not store your card details. The relevant provider’s privacy policy applies to payment data.
Communication records
Records of our communications with you via email or other messaging platforms, for the purpose of delivering your service and maintaining continuity of care.
Legal basis for processing
Aion Health processes your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) on the following bases:
• Your explicit consent , given at the time of joining, for the processing of health data
• Contractual necessity , to deliver the membership service you have purchased
• Legitimate interests , for service improvement and member safety, where these do not override your rights
Health data is a special category under the PDPA and is processed only with your explicit consent, which you may withdraw at any time.
Who we share your data with
We do not sell your data. Your health data, your biomarker results and anything you submit through our forms are never shared with advertisers. With your consent, and only from our public website, we share page view data with Meta, the company behind Facebook and Instagram, to measure and improve our advertising. The section Cookies and website analytics below explains how.
We share limited data with the following third parties solely to deliver your service:
Our laboratory partner
Your name, date of birth, biological sex, and the specific test panel requested are shared with N Health, our certified Bangkok laboratory partner (a BDMS affiliate), to conduct your blood analysis. Results are returned to Aion Health and stored in your member profile.
Payment providers
Payment processing only. Payment providers do not receive your health data.
If you choose to receive your updates on WhatsApp, your phone number, your name and the messages we exchange pass through WhatsApp, a service of Meta Platforms. We use it only for your program: your payment, your booking, reminders before your blood draw and when your report is ready. Your results and your health answers are never sent on WhatsApp. We keep the messages encrypted in our own systems. You can stop at any time by replying STOP, and we will keep you updated by email.
Service infrastructure
Your data is stored on secure cloud infrastructure in Singapore. We select providers that comply with international data security standards and contractually prohibit use of your data for any purpose other than storage and delivery.
We will never share your health data with employers, insurers, or any third party without your explicit written consent.
How long we keep your data
We retain your personal and health data for the duration of your membership and for five years after your membership ends, to allow you to return and access your longitudinal health record.
You may request deletion of your data at any time. Upon a valid deletion request, we will remove your data within 30 days, except where retention is required by Thai law.
Your rights under the PDPA
As a data subject under Thai law, you have the right to:
• Access your personal data and receive a copy of it
• Correct any inaccurate or incomplete data
• Delete your data, subject to legal retention requirements
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Object to or restrict certain types of processing
• Data portability , to receive your data in a structured, commonly used format
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been violated
To exercise any of these rights, contact us in writing at hello@aionhealth.co. We will respond within 30 days.
Cookies and website analytics
Our website uses cookies and similar technologies. This section describes all of them.
Essential cookies
Our website sets no cookie that you have not agreed to. The analytics and advertising measurement cookies described below are set on our domain by Google's and Meta's code, and only after you agree to each. Payments are not taken on this website but in your member account at app.aionhealth.co, where our payment provider sets the cookies it needs to detect fraud and keep your payment session together. Those are necessary to take a payment and cannot be declined, and they are only set if you begin one.
Analytics cookies
We use Google Analytics 4 (GA4) to understand how visitors find and read our site, including pages visited, time on site, and referral sources. GA4 assigns your browser a randomly generated identifier and stores it in a cookie. That identifier does not carry your name, and we never connect it to your health information or to anything you submit through our forms. It is not, however, anonymous: it can recognise the same browser across visits. Google’s privacy policy applies to data collected through GA4 and is available at policies.google.com/privacy. Data collected this way is processed by Google outside Thailand.
Nothing is loaded until you agree. If you decline, the page does not request any Google code at all and no analytics cookie is set. We do not load the tool and then switch it off.
Advertising measurement cookies
With your consent, we use the Meta Pixel, a tool from Meta Platforms, to measure whether our advertising on Facebook and Instagram brings people to our website. It tells Meta which pages of our public website you view and when, along with the technical information your browser sends with any request, such as your IP address and browser type. It stores a randomly generated identifier in a first-party cookie on our domain, which lets Meta recognise the same browser across visits and, if you use Facebook or Instagram, may let Meta connect your visit to your account there. We use it for page views only. It never receives anything you type in our forms, your health data or your biomarker results, it is not used on pages whose address carries a personal link, such as an unsubscribe link, and it never runs in your member account. Meta's privacy policy applies to data collected through the pixel and is available at facebook.com/privacy/policy. Data collected this way is processed by Meta outside Thailand.
Nothing is loaded until you agree. If you do not turn on advertising measurement, the page does not request any Meta code at all and no Meta cookie is set.
Your choices
When you first visit our website, a banner asks whether you agree to analytics and to advertising measurement, each as its own choice, before any of these cookies are placed. You can accept both, decline both, or choose one. Declining does not affect your ability to use the site.
Your answer is stored in your own browser rather than in a cookie or on our servers: to record that you had refused, we would first have to identify you, which is the thing you refused. You can change your answer at any time using the Cookie choices link in the footer of any page. When you withdraw your agreement, the tool concerned stops sending data at once and is not loaded on the pages you open afterwards. Because the answer is held in your browser, clearing your browsing data erases it and the banner will ask again, and your choice does not carry over to another browser or device.
Data security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include encrypted data storage, access controls limited to authorized personnel, and secure transmission protocols.
In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities in accordance with the PDPA.
Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page and notify active members via email or messaging. We will ask for your renewed consent where required by law.
Contact
Aion Health
Operated by Kairos Ventures Co., Ltd.
Bangkok, Thailand
Email: hello@aionhealth.co
WhatsApp: +66 65 526 4369