Privacy Policy

This Policy applies to personal data collected from prospective and current parents or guardians (“Data Subjects”) through the School's website, admissions inquiries, and the ordinary course of enrollment and instruction. It does not extend to third-party websites that may be linked from this website, over which the School exercises no control.

The School may collect the following categories of personal data, depending on the nature of the Data Subject's relationship with the School:

• Inquiry data: the parent or guardian's full name and telephone number; the child's name and age; campus of interest; and any supplementary remarks voluntarily submitted.
• Enrollment and health data: in respect of enrolled students, records pertaining to admission, physical development (height, weight), known allergies, daily attendance, and photographic documentation of classroom activities.
• Account credentials: an electronic mail address or telephone number, together with a password retained solely in encrypted form.

The School processes personal data for the following purposes: (i) responding to and administering admissions inquiries; (ii) maintaining accurate student and health records for the safety and wellbeing of enrolled children; (iii) communicating a child's academic progress, attendance, and related matters exclusively to that child's parent or guardian; and (iv) calculating and administering tuition fees. Personal data is processed on the basis of the Data Subject's consent, given by voluntary submission of such data, and the School's legitimate interest in the administration of its educational services. The School does not process personal data for advertising purposes, nor does it sell or license personal data to any third party.

The School has implemented technical and organizational measures proportionate to the sensitivity of the data concerned, including, without limitation:

• Access controls enforced at the database level, whereby student, health, and financial records are accessible solely to authorized personnel acting within the scope of their designated role;
• Segregation of parent-facing data such that a parent or guardian may access records pertaining only to their own child;
• Encryption of all data in transit between the Data Subject's device and the School's servers (HTTPS); and
• Rate-limiting of authentication attempts as a safeguard against unauthorized access.

Personal data is retained only for so long as is reasonably necessary to fulfil the purposes set out in Section 3, or as otherwise required by applicable law. Inquiry data submitted by prospective families is retained to facilitate the admissions process and may be deleted upon request pursuant to Section 6.

Subject to applicable law, a parent or guardian may request access to, rectification of, or erasure of personal data that they or their child have provided to the School. Such requests should be directed to the School using the contact particulars set out in Section 8, and will be addressed within a reasonable period.

Personal data is hosted on the cloud infrastructure of Supabase, a third-party database service provider engaged solely for the purpose of data storage and system operation. Save as aforesaid, the School does not disclose personal data to any third party other than as necessary for the operation of its educational services.

Inquiries concerning this Policy, or requests made pursuant to Section 6, may be directed to the School as follows:
Telephone / Zalo: 0937 323 889
Electronic mail: bgd@nye.edu.vn