Website Privacy Notice/Policy
At ELC International Schools we value the rights and freedoms of all people. This includes respecting your privacy and protecting your personal data. This privacy notice describes how we collect and use (or “process”) your information. It also tells you how to contact us as well as outlining what rights you have with regard to your personal data.
Who are we?
ELC International Schools (“we”, “our”, “us”) is an independent school located in Bangkok, Thailand. We provide education to children between the ages of 18 months and 11 years. ELC Family of International Schools is made up of five different campuses situated centrally in Bangkok and north of the city.
What is the purpose of this website privacy notice?
The purpose of this privacy notice is to provide detailed information about how we process personal data.
Our privacy notice should be read in conjunction with our other policies and terms and conditions which make reference to personal data, including our Safeguarding Policy, Data Protection Polcy, Acceptable Use Policy, Admission Policy, Website Policy, and Employee Policy
Please read this notice carefully and, if you have questions regarding your personal data or its use, please contact the Data Protection Office at email@example.com.
If you consider your personal data is not being used appropriately in accordance with this policy, you may contact us at firstname.lastname@example.org. Additionally, you are entitled to lodge a complaint with Thailand’s Personal Data Protection Committee.
We will update this Privacy Notice from time to time. Any substantial changes that affect how we process your personal data will be notified on our website and to you directly, as far as practicable.
What is personal data?
The term ‘personal data’ refers to any information which identifies you or can be used to identify a data subject when used in conjunction with other information.
The term ‘data subject’ describes the person about whom the personal data is about.
What personal data do we collect about you?
We process personal data about visitors to our website; prospective, current and past: students and their parents; staff and contractors; donors and supporters; and other individuals connected with or visiting our school.
The personal data we process takes different forms.
As a school, from time to time we also need to process personal data which is designated as “sensitive” or “special category personal data” in order to facilitate our school operations and activities. Such data includes personal data regarding a data subject concerning:
How do we obtain your information?
We collect most of the personal data we process directly from the data subject concerned (or often in the case of students, from their parents. In some cases, we collect data from third parties (for example, referees/references, and previous schools) or from publicly available resources.
We also collect data about you when:
How do we use your personal data?
Whenever we use (or “process”) any personal data (sensitive/special category or otherwise), we do so in accordance with applicable laws and regulations (including with respect to safeguarding or employment). Personal data held by us is processed by appropriate members of staff for the purposes for which the data was provided.
We take appropriate technical and organisational steps to ensure the security of personal data about individuals, including policies around use of technology and devices, and access to school systems.
In the course of school business, we share personal data (including special category personal data where appropriate) with third parties such as examination boards, the school’s Nurse/Doctor, the school’s professional advisors and relevant authorities. We may also be required to share your personal data with other organisations for legal or statutory purposes, or where we have your consent to do so.
We may also share data with the parent–teacher association in order to facilitate parental participation. Moreover, some of our systems are managed or operated by third parties (e.g. hosted databases, school website, school calendar, school post and my school portal or cloud storage providers).
Sharing data with these parties is always subject to contractual assurances that personal data will be kept securely and only in accordance with our specific directions. We do not transfer personal data you have provided unless we are satisfied that the personal data will be afforded an equivalent level of protection.
Additionally, the School will provide information to each pupil/parent (which can include relevant personal data of the respective child) as necessary to facilitate school operations.
Moreover, we may transfer data to other countries but in doing so will rely either on the existence of adequacy agreements or upon standard contractual clauses as part of agreements with data processors. For more information on how we transfer data to other countries is available upon request by contacting our Data Protection Officer at email@example.com.
Purposes for which we process personal data
We process personal data to support our operation as an independent school. In particular, we use the data for:
What is our legal basis for processing your personal data?
We may process your personal data for the above purposes based one or more of the following legal bases:
Under data protection laws, the rights belong to the individual to whom the data relates (i.e. the data subject). However, where consent is required as the lawful basis for processing personal data relating to students we will often rely on parental consent.
In general, we will assume that students’ consent is not required (and that other lawful bases are more appropriate, as described above) for ordinary disclosure of their personal data to their parents, e.g. for the purposes of keeping parents informed about the student’s activities, progress and behaviour, and in the interests of the student’s welfare, unless, in the school’s opinion, there is a good reason to do otherwise.
However, where a student seeks to raise concerns confidentially with a member of staff and expressly withholds their agreement to their personal data being disclosed to their parents, we may be under an obligation to maintain confidentiality unless, in our opinion, there is a good reason to do otherwise; for example where the school believes disclosure will be in the best interests of the student or other students, or is required by law.
What are our responsibilities for looking after your personal data?
In every case, when we are collecting or using personal data, we will comply with the requirements of data protection legislation, including Thailand’s Personal Data Protection Act.
What rights do you have over your personal data?
Under data protection laws, you have the right to:
If you would like to exercise any of your rights under data protection law for which we are the data controller, please make your request by emailing us at firstname.lastname@example.org.
Please note that these rights are not absolute, and we may be entitled or required to refuse requests where exceptions or exemptions apply.
We will respond to any such written requests as soon as is reasonably practicable and in any event within statutory time limits.
We try to ensure that all personal data held in relation to an individual is as up to date and accurate as possible. Please notify email@example.com of any significant changes to important information, such as contact details, held about you.
If you have any questions or concerns about how we are using your personal data or if you would like to exercise any of your information rights, please contact us at firstname.lastname@example.org.
How do we retain and store your personal data?
All personal data is securely stored in accordance with legal requirements. We retain personal data only for legitimate purposes, relying on one or more of the lawful bases as set out above, and only for so long as necessary for those purposes, or as required by law.
If you have questions, requests or issues, please let us know how we can help. Our Data Protection Officer can be reached at email@example.com