Our commitment to protecting your privacy and personal data
Last updated: December 1, 2024
Edulom ("we", "us") works with data about children, which is the most sensitive category a tutoring service can hold: a school name, a year group, a home address, and a diagnostic showing exactly what a child cannot yet do. This page says what we collect, why, who sees it, and how you get it back or have it removed. It is written to sit inside Thailand’s Personal Data Protection Act (PDPA), and where the law gives you a right, this page tells you how to use it rather than merely naming it.
We collect several types of information to provide and improve our services:
Name, email, phone number, the address where lessons happen, and the learner’s school, year, and subjects. The year is recorded in the form the school itself uses — ป.6 or ม.3 for a Thai school, Year 11 or Grade 10 for an international one — because matching a tutor to the wrong syllabus starts with recording the year in the wrong system.
What was paid, when, and against which block of sessions. Card numbers are handled by the payment provider and do not reach our systems.
The diagnostic at the start, what each session covered, attendance, and the notes a tutor writes afterwards. This is the part parents ask for most often, and it is also the part that says most about a child, so it is kept tightly.
IP address, browser type, operating system, device ID, and location information (with permission).
Collected information is used to:
Match students with suitable tutors, schedule tutoring sessions, process payments, and provide customer support.
Customize tutor recommendations, tutoring programs, and educational content based on your preferences and learning needs.
Send schedule notifications, platform updates, promotions, and other important information. You can unsubscribe at any time.
Verify identity, prevent fraud, and protect the security of users and the platform.
Analyze usage patterns to develop new features and improve service quality.
We do not sell your personal data. Information is only shared under the following conditions:
Name, grade, subjects, and tutoring schedule are shared with your chosen tutors for tutoring purposes.
Trusted partners such as payment gateways, hosting providers, and analytics services that support our operations.
When required by law, legal process, or valid government requests.
To protect the rights, property, or safety of Edulom, users, or the public.
We implement strict security measures to protect your data:
Traffic between your browser and us travels over TLS, and the databases we use encrypt what they store. Neither is remarkable, and a service handling children’s records without both would not be worth trusting.
A tutor sees the learner they teach and nothing beyond that assignment. Staff access is limited to the work in front of them, and access to learning records is logged.
Tutors work from records held in the Platform rather than from their own copies. When an assignment ends, the tutor’s access to that family ends with it.
Some of the services we depend on run outside Thailand, so some data crosses the border. PDPA requires the protection to travel with it, and where a provider cannot show that, it is not a provider we use.
As a user, you have the following rights over your personal data:
You can request a copy of the personal data we hold about you.
You can update or correct inaccurate personal information.
You can request deletion of your personal data, with some exceptions allowed by law.
You can request your data in a machine-readable format.
You can object to your data being used for marketing, and you can withdraw consent you gave earlier. Withdrawing it does not undo what was lawful before, and it does not cost you the lessons you already booked.
If our answer does not satisfy you, PDPA lets you take the matter to the Office of the Personal Data Protection Committee. We would rather you came to us first, and we will not treat a complaint as a reason to end a family’s lessons.
We use cookies and similar technologies to:
Required for basic website functions like login and security.
Help us understand how users interact with the platform.
Store your preferences like language and display settings.
You can set cookie preferences through your browser settings.
We retain your personal data for:
As long as your account is active or as needed to provide services.
Data is retained for up to 30 days after account closure for recovery, then deleted.
Kept for five years, which is what Thai accounting and tax rules require of the books. Deleting an account does not delete a receipt, and it should not.
Anonymized data may be retained for analytics purposes.
We take children's privacy very seriously:
Legal majority in Thailand is twenty, and for a learner below it the consent that matters is the parent’s or legal guardian’s. That is who opens the account, and that is who we answer to about the child’s data.
We ask for the school, the year, the subjects, and the address where lessons happen. We do not ask for an identity card number, a household registration, or a family income figure, because none of those help a tutor teach.
Read the record, correct it, or have it deleted, at any time and without giving a reason.
We may update this Privacy Policy from time to time. Significant changes will be notified via email or platform notification. We encourage you to review this policy periodically.
Questions about this policy, and any request to see, correct, or delete what we hold, go to this address. Say what you want and about whom; we may ask one question back to be sure we are handing a child’s record to the right adult.
Response Time
PDPA sets an outer limit for answering a request like this. We aim to be well inside it and to reply within seven working days.