Great business. Let’s make sure you’re seen.

<script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": ["LocalBusiness", "MedicalOrganization"],
  "name": "Bangkok Wellness Clinic",
  "alternateName": "บางกอก เวลเนส คลินิก",
  "url": "https://bangkok-wellness.co.th",
  "logo": "https://bangkok-wellness.co.th/logo.png",
  "description": "Premier anti-aging, cellular therapy, and executive wellness clinic in Bangkok, Thailand.",
  "address": {
    "@type": "PostalAddress",
    "streetAddress": "Sukhumvit 24, Khlong Tan",
    "addressLocality": "Khlong Toei",
    "addressRegion": "Bangkok",
    "postalCode": "10110",
    "addressCountry": "TH"
  },
  "geo": {
    "@type": "GeoCoordinates",
    "latitude": 13.7295,
    "longitude": 100.5684
  },
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "Customer Service",
    "telephone": "+66-2-123-4567",
    "availableLanguage": ["Thai", "English", "Japanese"]
  }
}
</script>

# Nginx Production Hardening (OWASP 2025 Grade A+)
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
add_header X-Frame-Options "DENY" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://line.me https://api.line.me;" always;

# Sensitive Path Defense
location ~* /\.(env|git|htaccess|docker|aws) {
    deny all;
    return 404;
}

<!-- Thailand PDPA 2026 Compliant Script (No Pre-consent Trackers) -->
<script>
(function() {
  const consented = localStorage.getItem('th_pdpa_consent');
  if (consented === 'granted') {
    enableAnalyticsTrackers();
  } else if (consented === 'rejected') {
    window['ga-disable-MEASUREMENT_ID'] = true;
  } else {
    // Withhold all third-party tracking scripts until explicit accept click
    showThaiPdpaBanner({
      onAccept: () => {
        localStorage.setItem('th_pdpa_consent', 'granted');
        enableAnalyticsTrackers();
      },
      onReject: () => {
        localStorage.setItem('th_pdpa_consent', 'rejected');
        window['ga-disable-MEASUREMENT_ID'] = true;
      }
    });
  }
})();
</script>