Privacy Policy

This Privacy Policy describes how Bangkok International School for Athletes ("BISA," "we," "us," or "our") collects, uses, and protects personal information when you visit bisa.school, complete our application or sign-up forms, contact us, or otherwise engage with our services. It applies to prospective students, parents/guardians, participants of BISA camps and tournaments, and any other visitors to our website.

We are committed to protecting your privacy and handling your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and any other applicable data-protection laws.

1. Who We Are

Bangkok International School for Athletes (BISA) is the data controller responsible for your personal data. You can reach us at:

• Email: contact@bisa.school
• Phone: +66 82 707 1888
• Website: www.bisa.school

2. Information We Collect

We collect personal information in the following ways:

Information you provide directly

When you complete an application form, sign-up form, or contact us, we may collect:

• Player's full name, date of birth, gender, and school
• Player's tennis level (e.g. UTR rating) and training background
• Parent's or guardian's name, relationship, contact information (email, phone, LINE ID, WhatsApp)
• Preferred method of contact
• Free-text answers you submit (e.g. reasons for applying, additional notes)
• Video submissions of match play or training, if provided as part of your application

Information collected automatically

When you visit our website, our analytics provider automatically collects:

• Device and browser information (device type, operating system, browser type)
• General location (typically at country or city level, inferred from IP address)
• Pages viewed, time spent, and how you found our site (referrer)
• Interactions with the site (clicks, downloads, form submissions)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Application review: to assess whether a player is a fit for our camps, tournaments, or programs.
• Communication: to contact you about your application, schedule interviews, share program details, and answer your questions.
• Program delivery: to organize, run, and manage the camps, tournaments, and activities you apply for.
• Safety and welfare: to comply with health, safety, and safeguarding responsibilities during BISA activities.
• Improvement of our services: to understand how visitors use our website and improve content and user experience.
• Legal compliance: to comply with applicable laws, regulations, and lawful requests.

4. Legal Basis for Processing

Under the PDPA, we rely on the following legal bases to process your personal data:

• Consent — you provide personal data to us voluntarily when you submit an application, sign-up, or contact form.
• Contract — where processing is necessary to arrange, deliver, and manage the program you have applied for.
• Legitimate interests — for site analytics, service improvement, and communication that is directly relevant to your relationship with us.
• Legal obligation — where required to comply with applicable law.
• Vital interest — in emergencies, to protect the health or safety of a participant or another person.

5. Sharing With Third Parties

We do not sell your personal data. We share it only in the limited circumstances below:

• Google Forms & Google Workspace — we use Google Forms to collect application and sign-up information. Data submitted through these forms is processed and stored by Google on our behalf.
• Google Analytics — we use Google Analytics to understand website traffic. Analytics data is processed by Google in accordance with their privacy policy.
• Partners and coaches — with your consent, we may share limited information with coaches, program partners, or third-party facilities (e.g. venues, accommodation providers) strictly as needed to deliver the program.
• Legal or safety reasons — we may disclose information if required by law, court order, or to protect the rights, safety, or property of BISA, our participants, or others.

6. International Data Transfers

Our service providers (such as Google) may store or process your data on servers located outside of Thailand. When this happens, we take reasonable steps to ensure that appropriate safeguards are in place to protect your information, consistent with the standards required by the PDPA.

7. How Long We Keep Your Data

We keep personal data only as long as it is needed for the purposes described in this policy:

• Applications that are not accepted: retained for up to 12 months, then deleted (or anonymized) unless we agree to keep the file for future consideration.
• Applications that are accepted: retained for the duration of your participation, plus a reasonable period afterwards for safety, medical, legal, and administrative purposes.
• Analytics data: retained by Google according to our Google Analytics settings (typically no longer than 26 months, in aggregated form).

8. How We Protect Your Data

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes access controls, use of reputable service providers (such as Google Workspace) with recognized security certifications, and staff training on data protection. However, no system is entirely secure, and we cannot guarantee absolute security.

9. Cookies and Analytics

Our website uses Google Analytics to help us understand how visitors interact with our pages. Google Analytics places cookies on your device to collect information such as page views, session duration, device type, and general location.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser settings to block cookies.

10. Minors and Parental Consent

BISA works with children and young athletes. If you are under the age of 20 (the age of majority in Thailand), you must have your parent's or legal guardian's consent before providing personal information to us. Parents and guardians who submit information about their child confirm that they have the legal authority to do so and consent to the processing of that data as described in this policy.

11. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you or your child.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request that we delete your data (subject to legal retention requirements).
• Right to restrict or object — to limit or object to certain processing activities.
• Right to data portability — to receive your data in a portable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details below.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated on our website or, where appropriate, by direct notice.

13. Contact Us