Last updated: September 19, 2026 · Issued under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA)
1. What this notice covers
International School of Pha Ngan (“the School”, “we”) collects and uses personal data about students and their families in order to provide education and keep children safe. This notice explains what we collect, why, who we share it with, how long we keep it, and what rights you have under Thailand’s Personal Data Protection Act (PDPA).
It applies to students, parents and guardians, and emergency contacts. General website visitors are covered by our separate website privacy policy.
2. Who is responsible, and how to reach us
Data controller — International School of Pha Ngan
53/14 Moo 1, Ban Tai, Koh Phangan, Surat Thani 84280, Thailand
Data protection contact — [email protected]
Tel +66 84-281-8555
For any question or request about your personal data, write to [email protected].
3. What we collect
| Category | Details |
|---|---|
| Student identity | Full name, date of birth, gender, nationality, passport or national ID number, identification photograph |
| Parent and guardian details | Full name, relationship to the child, current address, email, telephone number, emergency contacts |
| Academic records | Assessment results, progress reports, attendance records, student work, behaviour and support records |
| Health information (sensitive data) | Allergies, medical conditions, medication, dietary or activity restrictions, first-aid records |
| Photographs and video | Images from lessons and school activities |
| Financial records | Fee invoices, payment history, payer details |
| Account data | Student and teacher Google Workspace for Education accounts and the related usage records |
4. Why we use it, and on what legal basis
| Purpose | Legal basis under the PDPA |
|---|---|
| Admissions, enrolment and delivering teaching | Contract (section 24(3)) |
| Student safety and welfare | Vital interest (section 24(2)) and legal obligation |
| Reporting to the Ministry of Education and government agencies | Legal obligation (section 24(6)) |
| Billing tuition fees and keeping accounts | Contract, and legal obligation under tax law |
| Holding and using health information | Explicit consent (section 26) |
| Publishing student photographs on our website and social media | Consent (section 19) — requested separately, withdrawable at any time |
| Sending parents news and information about school activities | Legitimate interest (section 24(5)) |
We do not sell personal data, do not use student data for advertising, and do not pass it to commercial partners.
5. Who we share it with
| Recipient | Reason and scope |
|---|---|
| Google (Google Workspace for Education) | The school’s email, documents and storage. Google acts as a data processor under the Cloud Data Processing Addendum and the Workspace for Education Service Data Addendum, both signed by the School. |
| Payment systems | Issuing invoices and recording tuition payments |
| Government agencies | Where we are under a legal obligation, such as reporting to the Ministry of Education |
| Medical services | In emergencies only, for the safety of the student |
| Schools a student transfers to | Passing on academic records at a parent’s request |
Some data is held on cloud services that may be located outside Thailand. We use providers that offer internationally recognised safeguards and are bound by data processing agreements.
6. How long we keep it
- Academic records and graduation documents — kept for the period required by education law
- Health information — kept for as long as the student is enrolled with the School, and deleted within 12 months of their leaving
- Financial records — kept for at least 5 years as required by tax law
- Google Workspace accounts and their contents — suspended when a student or teacher leaves the School, and deleted within 12 months
- Published photographs — removed on receipt of a request to withdraw consent
7. Your rights
Under the PDPA, you and your child have the right to:
- Request access to the data and a copy of it
- Request correction of data that is inaccurate or out of date
- Request erasure or destruction of the data where there is no longer a reason to keep it
- Request that use of the data be temporarily suspended
- Object to certain kinds of processing
- Request that the data be transferred to another data controller
- Withdraw consent for photographs or health data at any time, without affecting your child’s right to their education at the School
- Lodge a complaint with the Office of the Personal Data Protection Committee
To exercise these rights, send your request to [email protected]. We reply within 30 days.
8. How we protect it
We limit access to student data to the teachers and staff who need it, set access rights by department within Google Workspace, require two-step verification on administrator accounts, and review our security settings regularly.
9. Changes to this notice
If we make a material change, we will notify parents by email and update the date at the top of this document.
International School of Pha Ngan · 53/14 Moo 1, Ban Tai, Koh Phangan, Surat Thani 84280 · [email protected]