KIDS COMPASS PRIVACY POLICY (Thailand PDPA Compliant)

Last Updated: [Insert Date]

This Privacy Policy explains how Kids Compass (Pty) Ltd, a company incorporated in Thailand (“Kids Compass”, “we”, “our”, “us”), collects, uses, stores, discloses, transfers, and protects personal data belonging to users (“you”, “your”), including parents, guardians, children, and providers.

We respect your privacy and process your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA).

By using our website, mobile applications, or services (“Platform”), you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Kids Compass provides a digital marketplace that helps parents discover, book, and manage children’s classes and activities offered by independent schools, centres, tutors, and instructors (“Providers”).

Kids Compass is not a school or childcare operator. Providers deliver the activities, and we facilitate listings, bookings, and payments.

2. Who This Policy Applies To

This Privacy Policy applies to:

• Parents and guardians

• Children whose data is submitted by their parent/guardian

• Providers and their staff

• Visitors browsing the Platform

• Anyone who creates an account or interacts with our services

3. Personal Data We Collect

We collect personal data in several ways:

A. Data You Provide to Us

1. Parent / Guardian Data

• Full name

• Email address

• Phone number

• Password

• Home district / preferred locations

• Profile photo (optional)

• Payment and billing details

• Communication preferences

2. Child Data (provided with parental consent)

• Child’s name

• Age or date of birth

• Gender (optional)

• Allergies, medical conditions, behavioural notes (optional)

• Preferences for activities

• Attendance data

3. Provider Data

• Business name, address, phone, email

• Owner or authorised representative information

• Instructor names and profiles

• Bank account or payment information

• Licences or certifications (if required)

4. Content You Submit

• Reviews, photos, and ratings

• Messages to Kids Compass

• Support requests

• Survey responses

B. Data Collected Automatically

When you use the Platform, we automatically collect:

• IP address

• Device type

• Unique device identifiers

• Browser type

• Mobile operating system

• Geolocation (if enabled)

• App activity logs

• Session duration

• Interaction with screens and features

• Click behavior

We also use cookies and tracking technologies (see Section 10).

C. Data Received from Third Parties

We may receive data from:

• Social logins (Google, Facebook, Apple)

• Payment processors

• Providers (e.g., attendance or incident notes)

• Marketing partners

• Analytics providers

We do not buy personal data from external sources.

4. How We Use Personal Data

We use data only for purposes permitted under the PDPA:

A. To Provide and Improve Our Services

• Create and manage user accounts

• Process bookings and payments

• Recommend classes based on preferences

• Display schedules and availability

• Send reminders and notifications

• Improve app functionality and user experience

B. To Enable Provider Services

We share necessary information with Providers so they can deliver the class:

• Child name and age

• Parent’s contact information

• Attendance status

• Special instructions (if the parent provided them)

C. Communication

We send:

• Booking confirmations

• Class reminders

• Safety or schedule updates

• Support responses

• Service announcements

With consent, we may also send:

• Marketing messages

• Promotions or offers

• Provider advertising

Users may opt-out at any time.

D. Safety, Security & Compliance

• Detect fraud or misuse

• Verify accounts

• Comply with legal obligations

• Respond to law enforcement requests

E. Analytics & Improvement

• Measure app performance

• Identify trends

• Conduct research

• Develop new features

5. How We Share Personal Data

Kids Compass shares data only when necessary and in compliance with the PDPA.

We may share data with:

A. Providers

For bookings, Providers receive:

• Child name

• Age group

• Booking details

• Parent’s contact information

Providers must adhere to PDPA and cannot use data for marketing unless the parent explicitly consents.

B. Service Providers (Data Processors)

Examples:

• Cloud hosting providers

• Payment processors

• SMS and email providers

• Customer support tools

• Analytics platforms

All processors must comply with PDPA and can only process data based on our instructions.

C. Legal or Regulatory Authorities

Only when required by Thai law.

D. Business Transfers

If Kids Compass undergoes merger or acquisition, data may transfer to the new owner—subject to PDPA protections.

E. With Your Consent

We will never share children’s data for marketing without explicit parental consent.

6. Children’s Privacy

A. Parental Consent is Mandatory

Kids Compass does not knowingly collect data from children directly.

All child data must be provided by a parent/guardian.

B. Sensitive Personal Data

If you provide medical, allergy, or behavioural information, you consent to Kids Compass processing this data so Providers can deliver safe experiences.

C. Rights Over Child Data

Parents may:

• Access their child’s data

• Delete or correct it

• Withdraw consent

Through their account or by contacting us.

7. Data Security

We use industry-standard technical and organisational safeguards, including:

• Encryption in transit and at rest

• Access controls and authentication

• Secure data centres

• Monitoring and intrusion detection

• Staff training on PDPA

• Regular reviews and audits

However, no system is completely secure.

8. Data Transfers Outside Thailand

If data is transferred or stored outside Thailand (e.g., cloud servers), Kids Compass ensures:

• Adequate protective measures

• Transfer based on PDPA-approved mechanisms

• Contracts requiring the recipient to protect the data

9. Data Retention

We retain personal data only as long as necessary:

• Account data: kept until deletion request

• Booking records: minimum period required by Thai law

• Payment data: per legal/tax requirements

• Child data: deleted upon parent request or account closure

If deletion is not immediately possible (e.g., backups), data will be isolated until safe deletion.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Remember preferences

• Improve functionality

• Analyse usage

• Deliver personalised content

• Enable essential features

Users can manage cookie preferences through browser settings.

A separate Cookie Policy can be provided if needed.

11. Your Rights Under the Thailand PDPA

You have the following rights:

✔ Right to Access

Request a copy of your personal data.

✔ Right to Correct

Ask us to fix inaccurate or incomplete data.

✔ Right to Delete

Request deletion, unless retention is required by law.

✔ Right to Withdraw Consent

For any processing based on consent.

✔ Right to Data Portability

Request transfer of your data to another provider.

✔ Right to Object

To certain types of processing or profiling.

✔ Right to Restrict Processing

Temporarily limit our use of your data.

✔ Right to Lodge a Complaint

With Thailand’s Personal Data Protection Committee (PDPC).

12. Marketing & Communication Preferences

You may opt-out of marketing at any time by:

• Email “unsubscribe” links

• SMS “STOP” replies

• Updating your account settings

• Contacting us directly

Service-related notifications cannot be disabled.

13. Third-Party Links

The Platform may contain links to third-party websites. Kids Compass is not responsible for their privacy practices. We encourage you to review their policies separately.

14. Updates to This Privacy Policy

We may update this Privacy Policy periodically.
Changes will be posted with a new “Last Updated” date.

If changes are significant, we will notify users via:

• Email

• App notifications

• Banner alerts

Continued use of the Platform after updates means you accept the changes.

15. Contact Information

If you have questions, or wish to exercise your PDPA rights, please contact us:

Kids Compass (Pty) Ltd
[Insert Registered Address in Thailand]
Email: [Insert Email]
Phone: [Insert Phone Number]
Data Protection Officer (DPO): [Insert Name/Contact if applicable]

Top of Form

Bottom of Form