Privacy Policy

Introduction

Wesley International School (“WIS” and “the School”) recognizes the importance of securing personal data and ensuring the privacy of all individuals associated with our institution, including the students, parents, and employees referred to by the word “You” or “Your”. As part of our commitment to a secure and trustworthy environment, we have established this Data Protection Policy to outline how personal information is collected, stored, processed, and shared. This policy serves as a framework for ensuring compliance with the Personal Data Protection Act B.E. 2562 (“PDPA”) and best practices, emphasizing the responsible and ethical handling of personal data.

Source of Data

Your personal data was provided directly by you through various sources, including but not limited to school applications or registration forms, inquiry forms, and other documents related to school services. This may also include information from previous qualifications, certificates, educational institutions, law enforcement agencies, and other government bodies.

Types of Data Collection

This policy applies to all personal data collected, stored, processed, and circulated by the school, including but not limited to:

  • Personal details
    • Full name (First name, Middle name, Last Name) in English and Thai
    • Gender
    • Date of birth
    • Nationality
    • Address
    • Academic performance
  • Contact Details
    • Phone number
    • Email address
    • Social Network Channel (Line App)
  • Sensitive personal details
    • Race
    • Religion
    • Health records
    • Disciplinary records
    • Local police records
    • Parent/guardian details

Purpose of Data Collection

WIS collects personal data for the following purposes:

  • Student enrollment, academic records, and assessments
  • Staff employment records, social security records, immigration processing for foreign employees, and payroll processing
  • Parent communication and engagement
  • Health, safety, and well-being of students and employees
  • Regulatory and legal compliance

Data Breach Response Plan

In the event of a data breach:

  • The Data Protection Officer (DPO) and the IT staff will assess the scope and impact
  • Affected individuals will be notified if necessary
  • The incident will be reported to the relevant authorities per PDPA guidelines
  • Measures will be implemented to prevent recurrence

Third-Party Sharing and Data Processors

Personal data may be shared with third-party service providers under strict agreements that require compliance with PDPA standards. Examples include but are not limited to:

  • Government agencies for immigration or legal compliance
  • Insurance or healthcare providers
  • Educational platforms and software providers

Contact Us

For any questions or inquiries for more details about our privacy notice or matters relating to the use or disclosure of personal data, you may contact Wesley International School at the office, or you may send an email to [email protected]

Back