This notice explains what personal data Learning Space collects about children and their families, why we collect it, how long we keep it, who we share it with, and the rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Who we are
Learning Space ("we", "us") runs English classes at our branch, Learning Space Plus @Workplace Phetkasem 81, Bangkok, as well as online courses and programs for partner schools. We are the data controller for the personal data described here.
To ask about your data or use your rights, contact us through the Contact page of this website, our LINE Official Account, or at the branch.
2. What we collect
- About parents and guardians: name, relationship to the child, phone number, LINE ID, e-mail address and, if needed, address.
- About the child: name, nickname, date of birth or age, current school and English level.
- About their learning: the classes and courses they take, timetable, attendance, hours used, progress, learning materials and notes written by our teachers and staff.
- Payments: packages bought, amounts, invoices and receipts.
- Website accounts (online courses): e-mail address, orders, delivery address and lesson progress.
- Only with your consent: photos and videos of your child, your child's health information (allergies, medical conditions, medication, learning needs and an emergency contact), and your agreement to receive marketing messages.
3. Why we use it
- To provide the classes you sign up for: arranging classes, taking attendance, keeping track of hours and progress, and contacting you about lessons, changes and payments (necessary for our agreement with you).
- To keep accounting and tax records as the law requires (legal obligation).
- To keep children safe and to run and improve our teaching, for example class planning and checking that our systems are secure (our legitimate interests, which we balance against your rights).
- To take and use photos and videos, keep health information, and send marketing messages — only if you give consent. Health information is sensitive data, so we ask for your explicit consent.
4. Children's data
Most of our students are under 10, so we ask the parent or legal guardian to give consent on the child's behalf. Saying no to photos, health information or marketing never affects your child's place in a class.
5. Who sees it
- Our staff and teachers, only as far as they need it for their work. Health information is visible to staff only.
- Service providers who help us run the website and our records — for example our hosting and database providers, our payment provider and messaging services (LINE, e-mail). They may only use the data to provide their service to us.
- Government authorities, when the law requires it.
- We never sell personal data.
6. Data stored outside Thailand
Some of our service providers store data on servers outside Thailand (for example in Japan). We only use providers that protect personal data to a standard required by the PDPA.
7. How long we keep it
- Student and parent records: while your child studies with us and for 3 years after their last class, then we delete or anonymise them.
- Payment and accounting records: 5 years, as Thai tax law requires.
- Health information: until your child stops studying with us, or straight away if you withdraw consent.
- Photos and videos: if you withdraw consent we stop using them in new material and remove them from our own channels where reasonably possible.
- Enquiries from families who don't enrol: up to 1 year.
8. Your rights
Under the PDPA you have the right to:
- see and get a copy of the personal data we keep about you and your child;
- ask us to correct data that is wrong or incomplete;
- ask us to delete data, or to stop or limit using it, in the cases the law allows;
- receive your data in a format you can take to another provider;
- object to how we use data based on our legitimate interests or for marketing;
- withdraw any consent at any time — it's as easy as giving it (use your consent link or contact us), and it doesn't affect what we did before;
- complain to the Office of the Personal Data Protection Committee (PDPC) if you believe we have not followed the law.
9. Keeping data safe
Access to our records is limited to staff who need it and protected by individual logins. Data is sent over encrypted connections, and we keep a history of changes to our records.
10. Changes to this notice
If we change this notice in a way that matters, we will publish the new version here and, where your consent is needed, ask you again.
