Privacy Policy

The website is used by two Kinderville organisations. Each is responsible for enquiries about its own services and is a data controller under the law.

• Kinderville Nova International School (KNIS) (โรงเรียนนานาชาติคินเดอร์วิลล์โนวา), private school, licence กน.12/2567. Tax ID 0994002791442. Address: 54/51 Moo 6, Chalong, Mueang Phuket, Phuket 83130, Thailand — school, camp, school tour and promotion enquiries; call-back requests without a chosen programme; job applications; website statistics and advertising
• Baby Einsteins Co., Ltd. (บริษัท เบบี้ ไอน์สไตน์ จำกัด), Kinderville kindergarten. Registration number and Tax ID 0835555001421. Address: 43/67 Moo 7, Rawai, Mueang Phuket, Phuket 83130, Thailand — kindergarten enquiries

If you sent an enquiry to the school but asked about the kindergarten (or the other way round), we will pass it to our colleagues at the other organisation so that you get a proper answer. The same applies to camps, classes and vacancies that belong to the kindergarten.

Contact for any question about your data: [email protected]. One address for both organisations. You can also write to KNIS at the postal address above.

What you enter in a form:

• your name and phone number, and in some forms your email;
• your child's (or children's) date of birth, so we can suggest a group or class by age;
• how you prefer to be contacted and your Telegram username, if you give it;
• your question;
• in a job application: the position, your contact details and CV.

What arrives with the form automatically:

• which form, page and page address;
• how you reached the website: advertising tags (UTM), ad click identifiers from Yandex, Google or Meta, the referring website and the first page of your visit;
• the visitor identifier from the Yandex Metrica cookie (_ym_uid), if your browser has it, and, if you pressed "Accept" in the cookie banner, the Google Analytics (_ga) and Meta (_fbp) identifiers as well. They tell us which ads and pages led to the enquiry;
• the time of submission and information about your browser.

IP address. We do not store your IP address. We keep only a one-way fingerprint of it (a hash) to limit how often one address can submit forms. The address itself is passed to Cloudflare to check that the form is sent by a person, not a program.

We do not ask for passport details, health information, photos or documents of your child through the website.

Counters on the website. On your first visit a cookie banner appears at the bottom of the page with two equal buttons: "Accept" and "Decline". It does not cover the website. Until you choose, and after "Decline", Google Analytics, Google Tag Manager and Meta Pixel are not loaded on the page. Section 9 explains the banner and how to opt out of the counters.

• Yandex Metrica always runs, regardless of your choice in the banner. It sees which pages you opened, how long you stayed, where you clicked and how you scrolled, your device type and browser, your approximate city based on IP address and how you arrived. Webvisor is on: it records actions on the page so we can see where the website is hard to use. The contents of form fields are not recorded: Webvisor shows asterisks instead, so it does not keep your name, phone number, your child's date of birth or the text of your question.
• Google Analytics (installed through Google Tag Manager) loads only after "Accept". It sees the same about your visit: pages, traffic source, device, approximate location and the fact that a form was sent, without its contents.
• Meta Pixel loads only after "Accept". It tells Meta that you visited the website, which pages you opened, which buttons you pressed and that you sent an enquiry (the fact and the form name, without its contents). Meta may link this to your Facebook or Instagram account and show you our ads. We do not pass your name, phone number, email or your child's date of birth to Meta.
• Tilda statistics always run, regardless of your choice in the banner. The website is built from pages made in the Tilda website builder, and its counter sends Tilda anonymous page-view data: the page address, the traffic source and technical browser parameters.

Maps and fonts. Pages include embedded Google Maps, and fonts load from Google servers. When such a page opens, Google receives your IP address and may set its own cookies under its own rules.

WhatsApp and Telegram buttons. When you press one, a short code such as "(k:ABC123)" is added to the message text. It tells us which page and which ad the conversation came from. You can delete the code; it does not affect our reply. The conversation then continues in the messenger, and we keep it in the same way as an enquiry.

• Reply to your enquiry, advise you, suggest a group, invite you to visit, prepare a contract — Data: form data and correspondence · Legal basis under the PDPA: steps before a contract at your request (Section 24(3))
• Remind you about your enquiry and tell you about admissions and programmes that suit your child's age — Data: name, contact details, child's age, history of contact · Legal basis under the PDPA: our legitimate interest (Section 24(5)); you can always opt out
• Understand how the website works and make it easier to use — Data: Yandex Metrica and Tilda statistics data · Legal basis under the PDPA: our legitimate interest (Section 24(5)); you can opt out
• The same, using Google Analytics — Data: Google Analytics data · Legal basis under the PDPA: your consent (Section 19): the "Accept" button in the banner; you can withdraw it at any time
• Understand which ads lead to enquiries and stop paying for ads that do not work — Data: advertising tags, traffic source, the Yandex Metrica identifier linked to the enquiry; Google and Meta identifiers only after "Accept" · Legal basis under the PDPA: our legitimate interest (Section 24(5)), you can opt out; for the Google and Meta identifiers, your consent (Section 19)
• Show our ads on Facebook and Instagram to people who have visited the website — Data: Meta Pixel data · Legal basis under the PDPA: your consent (Section 19): the "Accept" button in the banner; you can withdraw it at any time
• Protect forms from spam and the website from attacks — Data: IP address hash, browser information, Cloudflare check · Legal basis under the PDPA: our legitimate interest (Section 24(5))
• Consider a job application — Data: applicant data · Legal basis under the PDPA: steps before a contract at your request (Section 24(3))
• Comply with the law and lawful requests from authorities — Data: what the law requires · Legal basis under the PDPA: legal obligation (Section 24(6))

We do not need your consent to handle an enquiry: we do it because you asked us to contact you. The tick box under the form confirms that you have read this policy. Consent is needed only for Google Analytics and Meta Pixel: you give it with the "Accept" button in the cookie banner, and without it the website and forms work just the same.

If you do not want to receive messages from us, reply "stop" in the chat or write to [email protected], and we will stop.

• Enquiry and correspondence without a contract — 2 years after the last contact. Then we delete or anonymise it. Many families come back to us a year later, so we do not delete straight away.
• If a contract is signed — the data moves to the family file and is kept for the term of the contract, and after it ends for as long as the accounting and reporting laws for the school and kindergarten require, but no longer than 10 years.
• Job application — 12 months if we did not hire you. Longer only with your consent, so that we can offer you another vacancy.
• Server technical logs — up to 90 days.
• Record of how you reached the website, kept in your browser (kv_ft, kv_lt) — 90 days.
• Your choice in the cookie banner (kv_consent) — 12 months, after which the banner asks again.
• Yandex Metrica: cookies — up to 1 year; Webvisor recordings — 15 days; visit statistics — under Yandex's rules.
• Google Analytics (if you pressed "Accept"): cookies — up to 2 years; visit data — no longer than 14 months.
• Meta Pixel (if you pressed "Accept"): cookies — 90 days; after that Meta keeps data under its own rules.

We do not sell your data. We share it only with those the website and our work with enquiries cannot run without:

• Cloudflare (USA, servers worldwide) — hosting and protection of the website, checking that a form is sent by a person.
• Railway (servers in Singapore and the USA) — our server that receives enquiries, and the database.
• Staff work tools: the CRM system where we track enquiries; Google Workspace email; work messengers, including Telegram, where staff are notified of new enquiries; the service we use to run WhatsApp conversations; WhatsApp and Telegram, if you chose to be contacted through them.
• AI services (Anthropic, USA) that help staff process enquiries and correspondence.
• Yandex (Russia) — Yandex Metrica.
• Google (USA) — Google Analytics and Google Tag Manager (only after "Accept"), maps and fonts.
• Meta Platforms (Ireland, USA) — Meta Pixel (only after "Accept").
• Tilda (Russia) — page-view statistics.
• Our other organisation (the school or the kindergarten) — if your question concerns it.
• Government authorities — only when the law requires it.

Each receives only what it needs for its task.

Most of the services above operate outside Thailand, so data is processed in places including the USA, Singapore, Ireland and Russia, and in other countries where these providers have servers. Data protection rules there differ from Thailand's, and some countries offer weaker protection.

• Enquiry data goes to the hosting provider, our server and our work tools, because without them we cannot answer your request.
• Yandex and Tilda receive data about your visit with random identifiers.
• Google Analytics and Meta receive data about your visit only if you pressed "Accept". By pressing it you also agree that this data is transferred to the USA and other countries where data protection may be weaker than in Thailand.
• Your name, phone number, email, your child's date of birth and the text of your question are not sent to any of these services.

The forms on this website are meant for parents and legal guardians. We receive your child's data (date of birth, and name if you wrote it) from you and use it to suggest a group or class and to answer your enquiry.

We do not pass your child's date of birth or other form fields to Yandex Metrica, Google, Meta or any other advertising or analytics service.

We publish photos of children on the website only while the family's consent to publication is in force. If consent is withdrawn, we remove the photo. If there is a photo of your child on the website and you want it removed, write to us. Photo files are closed in robots.txt to robots that collect data for AI training: families consented to publication, not to training models. Well-behaved robots respect this rule.

You can:

• access the data we hold about you and get a copy;
• receive your data in a common electronic format or ask us to send it to another organisation;
• correct inaccurate or outdated data;
• delete or anonymise data when we no longer need to keep it;
• restrict processing — for example, while we check your request for correction;
• object to processing based on our legitimate interest, such as analytics. You can always object to advertising and admissions messages, without giving reasons;
• withdraw consent, where processing is based on it, as easily as you gave it. Consent to Google Analytics and Meta Pixel is withdrawn through the "Cookie settings" link at the bottom of every page. Withdrawal does not make earlier processing unlawful;
• complain to the Personal Data Protection Committee of Thailand (PDPC): www.pdpc.or.th.

How to do this. Write to [email protected]: who you are, which enquiry or child it concerns and what you want. We may ask you to confirm that the data is yours, so that we do not hand it to someone else. We will reply within 30 days, free of charge. If we refuse, we will explain why: the law allows refusal in some cases, for example when we must keep data under accounting law.

Cookies are small files that a website stores in your browser. We also use a similar technology, the browser's local storage (localStorage).

Cookie banner. On your first visit a banner appears at the bottom of the page with two equal buttons. It does not cover the website, and you can use the website without choosing.

• Until you choose, Google Analytics (together with Google Tag Manager) and Meta Pixel are not loaded.
• "Accept" turns them on for this page and the following ones.
• "Decline" keeps them off. The website and forms work just the same.
• Your choice is stored in your browser (kv_consent) for 12 months, after which the banner asks again. If your browser does not let the website store data, the banner will appear on every page.
• You can change your mind at any time: the "Cookie settings" link at the bottom of every page opens the banner again. After "Decline", the Google and Meta counters stop loading from the next page, and their identifiers are no longer attached to your enquiry. Cookies they have already set can be deleted in your browser settings.

Yandex Metrica and Tilda statistics run regardless of your choice in the banner, based on our legitimate interest. The website and forms work without them too. To opt out:

• Block third-party cookies in your browser settings or turn on a tracker blocker.
• Yandex Metrica offers a browser blocker extension (Yandex Metrica help, "Metrica blocker").
• Or write to [email protected] and we will remove counter identifiers from your enquiry.

• kv_consent (localStorage) — Set by: us · Purpose: remembers your choice in the cookie banner: "Accept" or "Decline" · Duration: 12 months · Type: strictly necessary
• kv_ft, kv_lt (localStorage) — Set by: us · Purpose: remember how you first and last reached the website (ad tag, referring site) to attach to your enquiry · Duration: 90 days · Type: functional: enquiry source
• TILDAUTM — Set by: us (Tilda form script) · Purpose: remembers the ad tag if you arrived from an ad · Duration: 30 days · Type: functional: enquiry source
• iso_code (localStorage) — Set by: us (Tilda form script) · Purpose: remembers the country code in the phone field · Duration: until you clear your browser · Type: strictly necessary
• Cloudflare Turnstile — Set by: Cloudflare · Purpose: checks that you are a person when you send a form; according to Cloudflare, it uses no cookies for this · Duration: during the check · Type: strictly necessary
• _ym_uid, _ym_d, _ym_fa — Set by: Yandex · Purpose: tell visitors apart, store the date of the first visit · Duration: 1 year · Type: analytics
• _ym_isad — Set by: Yandex · Purpose: checks whether an ad blocker is on · Duration: 20 hours · Type: analytics
• _ym_visorc — Set by: Yandex · Purpose: runs Webvisor · Duration: 30 minutes · Type: analytics
• yandexuid, yuidss, i, ymex — Set by: Yandex, on Yandex domains · Purpose: tell users of Yandex services apart · Duration: 1 year · Type: analytics
• _ga, _ga_P3F38KFY99 — Set by: Google · Purpose: tell visitors and visits apart · Duration: 2 years · Type: analytics, only after "Accept"
• _gid — Set by: Google · Purpose: tells visitors apart within a day · Duration: 24 hours · Type: analytics, only after "Accept"
• _fbp — Set by: Meta · Purpose: tells visitors apart for ads on Facebook and Instagram · Duration: 90 days · Type: advertising, only after "Accept"
• _fbc — Set by: Meta · Purpose: stores the click identifier if you came from a Meta ad · Duration: 90 days · Type: advertising, only after "Accept"
• fr — Set by: Meta, on Facebook domains · Purpose: shows and measures ads · Duration: 90 days · Type: advertising, only after "Accept"
• Google cookies on google.com — Set by: Google · Purpose: run embedded maps · Duration: under Google's rules · Type: functional

Full lists are in the Yandex Metrica help, the Google Analytics documentation and Meta's cookie policy.

The website works only over a secure connection (HTTPS). Enquiries are stored in our database; only staff and contractors who need them for their work have access. If a data breach happens, we will notify the PDPC within 72 hours, and you if the breach creates a high risk for you.

If we change this policy, we will publish the new version on this page with a new date. If we add new counters or services, we will update this page first. If a new service needs your consent, the banner will ask you again.

Questions about your data: [email protected]

Kinderville Nova International School, 54/51 Moo 6, Chalong, Mueang Phuket, Phuket 83130, Thailand.
Baby Einsteins Co., Ltd., 43/67 Moo 7, Rawai, Mueang Phuket, Phuket 83130, Thailand.