1. Introduction

Seedlings Institute ("the Institute", "we", "us") is committed to protecting the personal data of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This policy applies to:

• The website seedlings.one and Seedlings LMS platform
• LINE Official Account (@seedlings)
• LIFF applications (LINE Front-end Framework)
• LINE Login authentication service

2. Information We Collect

2.1 Information from LINE Platform

• Display Name and profile picture
• LINE User ID
• Email address (only when you consent via LINE Login)
• Friend status with our Official Account

2.2 Information You Provide Directly

• Full name, phone number
• Student information: name, age, grade level, language proficiency (CEFR level)
• Parent-student relationship details
• Tuition payment information

2.3 Information from LMS Usage

• Learning outcomes, quiz scores, progress tracking
• Attendance records and time spent on platform
• Activity logs within the system

3. How We Use Your Information

We use personal data to:

• Verify identity and manage user accounts via LINE Login
• Send learning reports, progress updates, and notifications to parents
• Personalize learning content to match student proficiency levels
• Process payments and issue receipts
• Communicate schedules, activities, and announcements
• Improve and develop our services

4. Children's Data Protection

• LMS registration for students must be completed by a parent or guardian
• Parents may access, modify, or delete their child's data at any time
• We do not publicly display any personal data of children
• We do not use children's data for direct marketing purposes

5. Data Disclosure

We do not sell, trade, or rent your personal data to third parties. We may disclose data only in the following circumstances:

• Service providers: LINE Corporation (Messaging API and LINE Login services), Supabase (database infrastructure), Vercel (hosting)
• Legal requirements: When required by government authorities or court orders

6. Data Security

We implement appropriate security measures including:

• Data encryption in transit (TLS/SSL)
• Authentication via LINE Login (we do not store passwords)
• Role-based access controls (Row Level Security)
• Regular data backups

7. Your Rights

Under the PDPA, you have the right to:

• Access: Request access to your personal data we hold
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Withdraw consent: Withdraw your consent at any time
• Data portability: Receive your data in a readable format
• Object: Object to certain types of data processing

If you block or remove the LINE Official Account (@seedlings), we will immediately stop sending messages. However, data within the LMS will be retained until you request its deletion.

8. Data Retention

• Account data: Duration of service use plus 1 year after termination
• Learning records: 3 years from course completion date
• Payment data: As required by applicable laws

9. Policy Changes

We may update this policy from time to time. We will notify you of any changes through our LINE Official Account or the LMS platform before the changes take effect.

10. Contact Us