Sophia Global Education and Discovery Co., Ltd. (the Company) recognizes the importance of personal data protection and is committed to complying with the Personal Data Protection Act B.E. 2562 (2019) (the PDPA) and other applicable laws.
This Privacy Policy sets forth the principles governing the collection, use, disclosure, and protection of personal data by the Company in connection with its educational programs, cultural exchange initiatives, and related services.
For the purposes of this Policy:
Personal Data means any information relating to a natural person which enables the identification of such person, directly or indirectly, excluding data of deceased persons.
Data Subject means the individual to whom the Personal Data relates.
Processing means any operation performed on Personal Data, including collection, use, disclosure, storage, or destruction.
Categories of Personal Data Collected
The Company may collect and process the following categories of Personal Data:
Identification information (e.g., name, date of birth, nationality, passport/ID number)
Contact information (e.g., address, telephone number, email)
Educational information (e.g., school, academic background)
Emergency contact details
Financial and transaction information
Photographic, video, and participation records
Any other information necessary for the provision of services
In the case of minors, the Company shall obtain consent from parents or legal guardians in accordance with applicable law.
Lawful Basis for Processing
The Company shall process Personal Data only where there is a lawful basis under the PDPA, including:
Consent of the Data Subject
Necessity for the performance of a contract
Compliance with legal obligations
Legitimate interests of the Company, provided such interests do not override the fundamental rights of the Data Subject
Prevention or suppression of danger to life, body, or health.
Purposes of Processing
The Company collects, uses, and discloses Personal Data for the following purposes:
1. Program Administration
– To process applications and manage participant selection
– To organize and administer educational programs and activities
2. Service Delivery
– To coordinate travel, accommodation, and related logistics
– To provide program-related services
3. Communication
– To communicate with participants, parents, and relevant parties
– To provide updates, notices, and support
4. Safety and Welfare
– To ensure the safety and well-being of participants
– To manage emergencies and provide necessary assistance
5. Legal and Administrative Compliance
– To comply with applicable laws and regulations
– To process payments and maintain financial records
6. Marketing and Public Relations
– To publish photographs, videos, and testimonials for promotional purposes, subject to consent where required
Disclosure of Personal Data
The Company may disclose Personal Data to third parties strictly on a need-to-know basis, including:
– Educational institutions and partner organizations
– Travel, accommodation, and logistics providers
– Service providers and data processors engaged by the Company
– Government authorities or regulatory bodies as required by law
The Company shall ensure that such third parties implement appropriate safeguards to protect Personal Data.
Cross-Border Data Transfer
Where necessary, the Company may transfer Personal Data to foreign jurisdictions, including but not limited to partner institutions in other countries.
In such cases, the Company shall ensure that adequate data protection standards are implemented in accordance with the PDPA.
Under the PDPA, Data Subjects have the following rights:
– Right to access Personal Data
– Right to rectification
– Right to erasure or anonymization
– Right to restriction of processing
– Right to data portability
– Right to object to processing
– Right to withdraw consent at any time
Requests to exercise such rights may be submitted to the Company using the contact details provided below.
The Company reserves the right to amend this Privacy Policy at its sole discretion. Any changes shall be effective upon publication through the Company’s official channels.