Privacy-Policy

Privacy policy Personal 

Data protection policy

     Carroll Preparatory Primary & Preschool prioritizes the rights and freedoms of everyone, including respecting your privacy and protecting your personal data. This privacy policy explains how we collect, use (or “process”), and safeguard your personal information. Additionally, it informs you about how to contact us and details your rights regarding your personal data.

     Carroll Preparatory Primary & Preschool is a learning center located in Chatuchak, Bangkok, Thailand. We provide education for children aged 18 months to 3 years old.

     Carroll Preparatory Primary & Preschool is an educational center licensed to provide basic education, operating under the Ministry of Education’s regulations concerning the rights of individuals to manage basic education facilities in educational centers, as per the year 2554. The center is located at 105/1 Thessabansongkrao Road, Lad Yao Subdistrict, Chatuchak District, Bangkok.

What is the purpose of this website’s privacy policy?

     The purpose of this privacy policy is to provide detailed information on how we process personal data. Our privacy policy should be read in conjunction with our other policies and terms and conditions, which reference personal data, including our data protection policy, acceptable use policy, and CCTV policy, among others. Please read this policy thoroughly, and if you have any questions regarding your personal data or its usage, please contact our data protection officer at info@carrollprep.ac.th

     If you believe that your personal data has not been handled appropriately according to this policy, you can contact us at info@carrollprep.ac.th

     In addition, you have the right to lodge a complaint with the Office of the Personal Data Protection Commission of Thailand. We periodically update this privacy policy, and any significant changes affecting how we process your personal data will be notified on our website and directly to you, wherever feasible.

What is personal data?

     The term “personal data” refers to any information that identifies you or can be used to identify you when used in conjunction with other data.

     The term “data subject” refers to the individual associated with personal data.

What personal data do we collect about you?

     We process personal data about website visitors, current, future, and past: students and their parents, employees and contractors, donors and supporters, and other individuals associated with or visiting our school.

Personal data that we process comes in different formats. 

For example:

• Name, address, phone number, email address, emergency contact information
• IP address, location data, and website traffic analytics and analysis
• Cookies on websites
• Date of birth, nationality, family details
• Admission records, academic transcripts, disciplinary records, other educational information, references, scripts, and exam marks.
• Employment information of parents or guardians
• Recording of images, sound, and videos
• Financial information and identity documents (e.g., for scholarship assessment or fundraising purposes).
• Employee and former employee data, including recruitment, training, performance management, payroll accounts, and other human resources information.

     As a school, we are required to process personal data under Section 26 of the Personal Data Protection Act, as a temporary measure, specifying that it involves sensitive personal data or specific data, to facilitate the operation and activities of the school. This includes personal data related to individuals associated with:

• Health
• Special Need Education 
• Biometric data (e.g., fingerprints, facial recognition)
• Data related to child protection and welfare 
• Consult Record
• Nationality
• Religions
• Criminal Record

 
How will we receive your information?

     We primarily collect personal data directly from the relevant data subjects (often in the case of students, from their parents/guardians). In some cases, we gather information from third parties such as referees/judges and previous schools, or from public sources. Additionally, we also collect information about you when:

• You are interested in enrolling students in our school
• You have registered to participate (or have participated) in one of our activities
• You visited our website
• You want to apply to be a guardian or a student
• You registered to receive our newsletter and/or promotional emails
• You have expressed interest in working for or collaborating with us
• You are an employee of ours or an organization that we have a business relationship with

How will we use your personal data?

     Whenever we use (or “process”) any personal data (including sensitive/special categories or otherwise), we will do so in accordance with applicable laws and regulations (including those related to protection or employment). 

     We employ technical and organizational measures appropriate to ensure the security of personal data related to various individuals, including policies regarding the use of technology and devices, and access to school systems.

     In the school business curriculum, we share personal data (including personal data under Section 26 of the PDPA, often referred to as “special categories” or “sensitive data” as appropriate) with third parties such as examination boards, school nurses/doctors, school professional advisors, and relevant agencies. We may also need to share your personal data with other organizations for legal purposes or when we have obtained your consent to do so.

     We may also share information with parent-teacher associations for the convenience of parental involvement. Additionally, certain parts of our system are managed or operated by third parties (such as hosted databases, school websites, school calendars, school postal services, and my school’s portals, or cloud data storage providers).

     Sharing data with these individuals must be under contractually guaranteed assurances that personal data will be securely stored and handled strictly according to our specific guidance. We will not transfer your personal data unless we ensure that it receives equivalent protection.

     In addition, the school will provide information to each student/parent (which may include related personal data of the involved child) as necessary for the school’s operations. 

     Furthermore, we may transfer data to other countries, contingent upon the existence of standard contractual clauses as part of agreements with data processors. For further information regarding the methods of data transfer to other countries, you can contact our data protection officer at info@carrollprep.ac.th.

Purpose of Processing Personal Data

     We process personal data to support the operations of our private school, particularly for the following purposes:

• Selection and admission of students
• The enhancement of education and value for our students includes managing our curriculum, tracking academic progress and educational needs, reporting internally and to parents, managing student admissions for public examinations, and sourcing references for students (including after they have left)
• Providing educational support and related services to students
• Caring for student welfare, including spiritual and moral guidance, welfare services, healthcare services, and support services
• Ensuring a safe and secure environment for students, staff, and visitors to the school
• Compliance with legal requirements and regulations
• Management operations including student records management, invoicing and fee management, accounting, school property management, security management (including the use of closed-circuit cameras in accordance with our CCTV policy and monitoring school IT and communication systems in line with our acceptable use policy), compliance with school rules and policies for students and staff, and maintenance of important historical records
• Employee management includes recruitment/hiring, contract management, payroll management, retirement benefits, sick leave management, performance evaluation and review, handling complaints, capabilities, or disciplinary processes, maintaining appropriate personnel records for current and former employees, and providing reference documents
• Progress including fundraising efforts
• Analysis of website traffic, demographic data, and user behavior through analytics tools and cookies 
• Promoting our school through our website, prospectuses, printed materials, and other communications (including through our social media accounts)
• Maintaining relationships with alumni and former employees of our school.
• For recording historical events and memorable moments related to historical preservation

     The legal basis for processing your personal data may include one or more of the following:

• We have obtained consent from individuals (or their parents/guardians where applicable) to do so. You can withdraw your consent at any time by emailing us at info@carrollprep.ac.th
• It is necessary for compliance with contracts (e.g., employment contracts with staff members)
• It is necessary for compliance with our legal obligations. In this regard, we may use personal data to comply with any rights or legal obligations imposed by law or enforceable in relation to employment contracts, and/or to prevent and detect crimes, and assist in investigations (including criminal investigations) conducted by the police and other authorized agencies
• It is necessary for the legal benefits of ours or third parties. “Legal benefits” include our benefits in providing high-quality education, promoting relationships with members of the school community, and our interests in managing and operating the school effectively
• It is necessary to protect the significant interests of individuals (in limited circumstances, such as when a student experiences a life-threatening accident or illness while at school, and we need to process the personal data of that student to ensure immediate and appropriate medical care)
• It is necessary for the preparation, execution, or defense against legal claims.
• It is necessary due to compelling public interest reasons, including the purpose of protection
• It is necessary for medical purposes, including medical diagnosis, providing healthcare or treatment for students, managing healthcare systems related to this, and/or assessing the capabilities of staff in performing their duties
• Necessary for purposes of data retention, research, or statistical purposes.

Consent

     Under the Personal Data Protection Act (PDPA) of Thailand, individuals (such as data subjects) have rights regarding their personal data. However, when it comes to processing personal data concerning students, we often rely on parental consent as a legal basis, unless considering the nature of the processing and the age and understanding of the student, which may deem the student’s consent more appropriate.

     Parents should be aware that in such situations, their views may not always be considered, depending on the child’s best interests, legal rights of the parents, or contractual obligations they may have. 

     Taking into account the overall circumstances, generally, it may not be necessary to obtain consent from students (and other suitable legal bases should be used as previously explained) for disclosing personal information to parents for general purposes. This includes informing parents about activities, academic progress, and behavior of students, as well as for the welfare benefits of students, unless the school has a good reason to do otherwise based on its own discretion.

     However, if a student wishes to confidentially disclose concerns to school staff and does not consent to the disclosure of their personal information to parents, we may have a legal obligation to maintain confidentiality, unless we see good reason to do otherwise. For example, if the school believes that disclosing the information would be in the best interests of the student or other students, or if it is required by law.

Our responsibilities in handling your personal data include compliance with the Personal Data Protection Act (PDPA) 2019 of Thailand and any other relevant laws and regulations that may be applicable whenever we collect or use personal information. This ensures that we adhere to legal requirements regarding the protection and processing of personal data.

What rights do you have regarding your personal data?
Under data protection laws, you have the right to:

• Access and obtain copies of personal data that we hold about you (subject to legal exceptions)
• You can correct the personal information we have about you if it is inaccurate
• You can instruct us to delete your personal data in certain cases
• Request to restrict our processing activities for your data in specific situations
• Receive your personal data that we have stored, which you provided to us in a format suitable to your specification, including for the purpose of transmitting that personal data to other data controllers
• I object on the grounds that, due to specific circumstances, any of our processing activities that you feel disproportionately impact your rights (including the right to object to fundraising or communication efforts, and objecting to us creating profiles about you for fundraising or communication purposes)
• In cases where our processing relies on your consent, you have the right to withdraw that consent without affecting the lawfulness of our processing based on consent before its withdrawal

 
     If you wish to exercise any of your rights under data protection law, where we act as the data controller, please send your request via email to us at info@carrollprep.ac.th

     Please note that these rights are not absolute, and we may have the right or obligation to deny requests based on exceptions or exemptions. We will respond to such requests promptly and, where applicable, within the timeframe required by law.

     We strive to ensure that all personal data we hold about any individual is up-to-date and accurate. If there are any significant changes to your personal information, such as contact details, please inform us at info@carrollprep.ac.th

     If you have any questions or concerns about how we use your personal data, or if you wish to exercise any rights regarding your data, please contact us at info@carrollprep.ac.th.

How do we store and maintain your personal data?
All personal data will be securely stored in accordance with legal requirements. We retain specific personal data solely for lawful purposes, based on at least one legal basis as outlined above, and only to the extent necessary for those purposes or as required by law.

Contact Us
     If you have any questions, requests, or concerns, please let us know how we can assist you. Our data protection officer can be contacted at info@carrollprep.ac.th