1. Introduction
1.1 We are committed to protecting and respecting your privacy. St. Andrews International School (“St. Andrews”) is an independent school which is part of Taylor’s Schools. In this privacy notice, references to “we”, “us”, “our” is a reference to St. Andrews.
1.2 This privacy notice deals with any personal data we process which is not covered in our parent and pupil privacy notices. It sets out the basis on which any personal data we collect from you is handled by us in the course of our relationship with you. For example, this notice applies to you if you are a potential recruit, next of kin, supplier, or potential supplier, alumni, or prospective pupil or parent of a prospective pupil.
1.3 For prospective parents and pupils, please also see our parent and pupil privacy notices. These are also available on our website.
1.4 Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
1.5 For purposes of the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), we are deemed to be an organisation to which the PDPA would apply.
1.6 If you are reading this privacy notice online, we recommend that you print and retain a copy for future reference.
2. Information we collect about you
Information you give us
2.1 You may give us personal data about you, in a number of ways; these include:
- 2.1.1 using, visiting or interacting with our website (such as filling out forms or registering on our website);
- 2.1.2 visiting our offices or schools;
- 2.1.3 during an interview or meeting;
- 2.1.4 corresponding with us by phone, e-mail or post; and
- 2.1.5 sending information directly to us, or providing information as requested by us and/or which is necessary from time to time (for example providing your job application form, CV or business card).
2.2 The information you give us may include the following information about you:
- 2.2.1 full name;
- 2.2.2 photograph;
- 2.2.3 marital status;
- 2.2.4 national registration identity card number;
- 2.2.5 salary;
- 2.2.6 employment history;
- 2.2.7 contact details (including home address, e-mail address, and mobile, home and/or work phone number);
- 2.2.8 financial information (for example payee details);
- 2.2.9 passport details, nationality and other information relating to immigration status;
- 2.2.10 previous educational records and achievements;
- 2.2.11 information received via safeguarding forms when visiting a site;
- 2.2.12 information about your physical or mental health, or disability status, to ensure your health and safety at our sites and to assess your fitness to work and to provide appropriate adjustments;
- 2.2.13 information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting; and
- 2.2.14 references (as an applicant or potential supplier).
Technical information we collect about you when you visit our website
2.3 With regard to each of your visits to our website we may automatically collect the following information:
- 2.3.1 technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
- 2.3.2 information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); pages you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our number.
2.4 Our website may contain links to and from the websites of our partner networks, advertisers, suppliers and affiliates. If you follow a link to any of these websites, please note that these websites are not covered by this notice and may have their own privacy notices. We do not accept any responsibility or liability for these notices. Please check these third party notices before you submit any personal data to these websites.
Information we receive from other sources
2.5 We may be working closely with third parties (including, for example, recruitment agents, previous employers, medical practitioners, education authorities, business partners, payment and delivery services) and may receive information about you from them.
2.6 We may also use CCTV footage to ensure our sites are safe. We may receive information about you if you use any of the other websites we operate or the other services we provide.
3. Cookies
3.1 Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Notice which is made available on our website.
4. Contact us
4.1 Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to our Data Protection Officer at helpdesk@standrews-schools.com.
5. Uses made of the information
Information you give to us
5.1 We will use the information you give to us to pursue the following legitimate interests (as applicable to our relationship with you):
- 5.1.1 promote the objects and interest of our schools, ensure the most efficient management of the schools and ensure that the schools’ legal obligations are adhered to;
- 5.1.2 to store this information on our management information system/s;
- 5.1.3 to enforce our terms of use with you or any other contract we may have with you;
- 5.1.4 for the purposes of recruitment;
- 5.1.5 to enable us to receive your services; and
- 5.1.6 where you have attended one of our schools, to keep you up to date with key school news and upcoming events.
5.2 In order to pursue the legitimate interests referred to in paragraphs 5.1.1 and 5.1.6, we rely on software applications and other technology to process personal data about you. These include the school’s management information system and our HR and finance systems. The third parties we use to deliver these applications are carefully chosen and vetted by us to ensure that, among other things, your information is kept secure. For further information on the kind of technology we use, please contact our Data Protection Officer (see paragraph 4).
5.3 We will also use the information you give to us as is necessary to carry out our obligations arising from the contract (or potential contract) between you and us and to provide you with the information and services that you request from us or receive the services we request from you. For example, we may be recruiting you for a role at Taylor’s Schools, or engaging you to supply us with services and will use personal data where necessary to recruit you or receive your services.
5.4 In addition, we may be required by law to do the following (which is not an exhaustive list):
- 5.4.1 keep an accounting record of payment;
- 5.4.2 keep records as may be prescribed by our administration and governance arrangements; and
- 5.4.3 keep a record to evidence fair recruitment processes.
5.5 Inevitably, there will be an overlap between what we do that is necessary to (a) perform our contract with you, (b) carry out our legal obligations and (c) pursue a legitimate interest although we have tried our best to demarcate these as set out above. If you have any questions about these please contact our Data Protection Officer (see paragraph 4).
Information we collect about you from our website
5.6 We will use this information for the following legitimate interests:
- 5.6.1 to contact you if you have made an enquiry to one of our schools via our online enquiry form and/or to inform you about available places in the future;
- 5.6.2 to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- 5.6.3 to improve our website to ensure that content is presented in the most effective manner, and your online experience is as effective and appropriate as possible, for you and for your computer;
- 5.6.4 as part of our efforts to keep our website safe and secure.
Information we receive from other sources
5.7 We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for one of the purposes set out above (depending on the types of information we receive). For example, we may receive a reference from a previous employer relating to you, which may impact a recruitment decision.
When we disclose information
5.8 In order to pursue one of the legitimate interests set out above, we may share your personal information with:
- 5.8.1 Asia Regional Head Office;
- 5.8.2 A member of the Taylor’s Schools group of companies, which means our subsidiaries, our ultimate holding company and its subsidiaries;
- 5.8.3 local authorities, education authorities (for example, Office of the Private Education Commission and the Ministry of Education), any Family Service Centre in Thailand or the police where we have reason to believe there are safeguarding concerns in respect of a child;
- 5.8.4 business partners, professional advisors, suppliers and sub-contractors for the performance of any contract we enter into with them or you.
5.9 We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce our contract (between us and you) and other agreements.
Where we need to get your consent
5.10 We will not market services to you (other than in accordance with paragraph 5.1.6 above) without your consent and you have the right to ask us not to use your contact details for marketing. Please contact helpdesk@standrews-schools.com if you no longer wish to be contacted by us.
6. Transmission of personal information outside Thailand
6.1 The data that we process about you may be transferred to, and stored at, a destination outside Thailand. We try to limit this where possible, but it may be necessary where, for example, one of our suppliers has a data centre outside Thailand. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice. We will also ensure that the appropriate legal safeguards are in place prior to the transfer, for example ensuring that any contracts between us and the recipient of the information are oblige the supplier to adhere to a standard equivalent to the level of protection under the PDPA, or the country we are transferring the data to is deemed by the PDPA (as the case may be) as an adequate country.
7. Your rights
7.1 Under the GDPR and PDPA, you have the following rights:
- 7.1.1 Right to correction. You have the right to have inaccurate personal data about you rectified.
- 7.1.2 Right to restriction. You have the right to obtain from us the restriction of processing where: (a) you contest the accuracy of the personal data we hold about you; (b) the personal data has been unlawfully processed; (c) we no longer need the personal data but they are required for the purposes of the establishment, compliance, or exercise of legal claims; (d) you object to the processing and, as a result, we agree to cease that processing (please see paragraph 7.1.4 for more details); and (e) the personal data must be removed but you requested the restriction of use instead.
- 7.1.3 Right to request transfer. In certain circumstances, you have the right to receive personal data from us in a structured, commonly used and machine-readable format and the right to transmit it to a third party organisation.
- 7.1.4 Right to object. You have the right to raise an objection to any of our processing in paragraphs 5.1 and 5.2. Please tell us if you object to any type of processing that we do and we will work with you to address any concerns you may have.
- 7.1.5 Right to object to marketing. If you do not want us to process your personal data for direct marketing, please tell us and we will ensure that we no longer do this.
- 7.1.6 Right to complain to the Personal Data Protection Committee (“PDPC”). Whilst we would always prefer it if you approached us first about any complaints or queries you may have, you always have the right to lodge a complaint with the PDPC.
- 7.1.7 Right to request access. You have the right to access personal data we hold about you. Please contact our Data Protection Officer if you wish to do so at helpdesk@standrews-schools.com.
- 7.1.8 Right to notice. You have the right to be notified of the purposes for which we intend to collect, use or disclose your personal data before such collection, use or disclosure unless exemptions apply.
- 7.1.9 Right to withdraw consent. You have the right to withdraw your consent given on the collect, use or disclose of your personal data.
- 7.1.10 Right to request disclosure. You have the right to request us to disclose the acquisition of your personal data we received from other sources.
- 7.1.11 Right to receive. You have the right to receive your personal data from us and request us to send or transfer such personal data to another party with you copied.
- 7.1.12 Right to remove. You have the right to request us to remove or anonymise your personal data which (a) are no longer necessary for the purposes for which the personal data are processed, (b) consent is withdrawn, (c) are subject to your objection, and (d) are unlawfully collected, used, or disclosed.
8. How long we keep personal information
8.1 We will not keep any personal data about you for any longer than is necessary for the purposes for which the personal data are processed.
8.2 We follow a data retention policy which determines how long we keep specific types of personal information. Certain types of information could be retained up to 35 years. For further information about the criteria we use to determine what periods we keep specific information, please contact our Data Protection Officer (see paragraph 4).
9. Use of our website
9.1 Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
10. Changes to our privacy notice
10.1 Any changes we make to this privacy notice in the future will be posted on our website and, where possible and appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy notice.