Best Language Consultant Company (“Company”) realizes and attaches importance to the protection of your personal data and strictly complies with the respect for your privacy rights as a priority. This Privacy Notice (“Notice”) is therefore prepared to inform you of the details of the purposes of collecting, using, or disclosing (collectively referred to as “processing”) personal data, including your rights under personal data protection laws.
​
For the processing of your personal data under the purposes of this Notice, the Company acts as a Data Controller, which means that the Company has the authority and duty to make decisions regarding the collection, use, or disclosure of personal data.
​
“Processing of personal data” means any operation performed on personal data, such as collecting, recording, copying, organizing, storing, modifying, altering, using, retrieving, disclosing, transferring, publishing, merging, deleting, destroying, etc.
​
“Personal data” means information about an individual which enables the identification of that individual, whether directly or indirectly, but does not include the information of deceased persons specifically or information that cannot identify the data subject.
​
“Sensitive personal data” means personal data as stipulated in Section 26 of the Personal Data Protection Act B.E. 2562 (2019), such as racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health information, disability, labor union information, genetic data, biometric data, or any other data that affects the data subject in a similar manner as prescribed by the Personal Data Protection Committee.
​
“Data Subject” means a natural person who is the owner of the personal data that the Company collects, uses, or discloses.
​
“Staff” means the officers and employees of the Company.
​
“Website User” means a person who accesses the website www.blcenglish.co.th
​
“Other related persons” means individuals involved in the Company's operations other than website users.
​
The Company processes the collection, use, or disclosure of your personal data as follows:
​
1. Legal Bases for Processing Personal Data
​
1.1 The Company collects your personal data under the following legal bases:
​
1.1.1 Necessity for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. The Company will collect, use, or disclose your personal data according to the agreement you have made with the Company. The Company will not be able to operate or provide services if such personal data is not received.
​
1.1.2 Necessity for compliance with the law applicable to the Company. Since the Company is under the supervision and must act in accordance with relevant laws, rules, regulations, or announcements, it is necessary for the Company to collect, use, or disclose your personal data to comply with such laws, rules, regulations, or announcements.
​
1.1.3 Necessity for legitimate interests of the Company or a third party, where such interests are not overridden by your fundamental rights in personal data. For example, coordinating and providing information to you or for the purpose of maintaining security within the company premises.
​
1.1.4 Your explicit consent, in cases where the processing of personal data requires your consent for the collection, use, or disclosure of your personal data for the benefit or to respond to your needs.
​
2. Personal Data Collected by the Company
​
The Company collects, uses, or discloses your personal data only as necessary for lawful purposes and in accordance with the consent obtained from you. The Company collects your personal data through the following sources or methods:
​
1. Data collected through filling out various forms or when you directly provide personal data to the Company, such as during application, registration, job application, signing contracts or documents, completing surveys, or using products, services, or other service channels under the Company’s control, or when the data subject communicates with the Company at its office or via other contact channels under the Company's supervision, etc.
​
- Title, first name, middle name, last name, nickname, gender, age, date of birth, nationality, education, marital information
- Contact information such as house registration, address or contact location by mail, telephone number, mobile phone number, fax number, email address
- Bank account number, credit card number, etc.
​
2. Data collected directly through input into the website www.blcenglish.co.th.
​
- First name, last name, email, phone number
​
3. Data collected through identity verification or course registration.
​
- Photocopy/image of ID card, house registration, driver’s license, passport including data within such documents, signature
​
4. Data obtained from image capturing by still cameras, video cameras, or CCTV in the event of entering the office building or premises under the Company’s care.
​
- Image data including still images and video footage
​
5. Data collected through the use of technology to detect or track your behavior in using the website www.blcenglish.co.th.
​
- Browsing history, data collected through cookies or similar technologies, device ID, device type, connection details, browser information, language used, operating system used, etc.
​
3. Purposes of Collecting and Using Your Personal Data
​
The Company collects your personal data under lawful purposes and only as necessary within the scope of such purposes or for directly or indirectly related benefits in order to conduct business involving management and services related to the Company’s operations, security, as well as purposes relating to legal compliance, maintenance of public order, or protection of public interest. The purposes listed below are only the general framework for the Company’s use of personal data. Only the purposes relevant to the services you use or are connected with will apply to your data, which include but are not limited to the following:
​
3.1 To carry out necessary actions for compliance with laws, regulations, orders, or announcements related to the Company’s business
​
3.2 To carry out transactions or provide services, including services under contracts between the Company and you or with third parties
​
3.3 To carry out necessary actions to fulfill the Company’s duties to competent authorities such as tax agencies, law enforcement, or the Company’s legal obligations
​
3.4 To carry out necessary actions for legitimate or lawful interests of the Company or of other individuals or legal entities related to the Company’s operations
​
3.5 To provide and manage the Company’s services, including services under contracts with you, data analysis, marketing plan development, efficiency improvement, problem resolution, and development of service and management quality or the performance of the Company’s website
​
3.6 To carry out purposes or necessities of internal organizational management, including recruitment
​
3.7 To oversee, operate, track, inspect, and manage services to facilitate and align with your needs
​
3.8 To store and update your information, including documents referring to you
​
3.9 To prepare records of personal data processing as required by law
​
3.10 For security, prevention, and investigation of fraud, prohibited acts, or illegal acts that may cause harm to the Company or to the data subject at the premises under the Company’s control
​
3.11 For identity verification, authentication, and inspection of information when you apply for the Company’s services, contact for services, exercise legal rights, or to prevent spam or unauthorized or illegal activities
​
3.12 To send notifications, communicate, and inform you of updates
​
3.13 To prepare and deliver relevant and necessary documents or information
​
3.14 To inspect how data subjects access and use the Company’s services, both in general and individually, and for research and analysis purposes
​
3.15 To prevent or stop dangers to life, body, or health of persons, including epidemic surveillance
​
3.16 To comply with applicable laws, orders, or to carry out legal proceedings, respond to court orders, and exercise legal rights related to your data
​
4. Disclosure of Your Personal Data
​
The Company may disclose your personal data to the following types of persons and channels:
​
4.1 Government officials, competent agencies, or other persons to carry out legal obligations, orders from competent persons, court orders, etc.
​
4.2 Business partners, contractual parties, service providers, agents, or related persons who are necessary for providing the Company’s services and are connected with your data, such as database service providers, document couriers, website developers, service agencies you contact via the Company, marketing service providers, advertising media, and external consultants
​
In cases where the disclosure of your personal data requires your consent, the Company will request such consent in accordance with the provisions and conditions of applicable laws.
​
5. Your Legal Rights
​
The Personal Data Protection Act aims to give you greater control over your personal data. You can exercise your rights under the Act once the provisions regarding the rights of data subjects come into effect, with details as follows:
​
5.1 Right to Access and obtain a copy of your personal data, including the right to request the disclosure of the source of data collected by the Company without your consent, unless the Company has the legal right to reject your request or a court order exists, or if accessing the data would affect the rights and freedoms of others
​
5.2 Right to Rectification – to request correction of your personal data that is inaccurate or incomplete, so it becomes accurate, current, complete, and not misleading
​
5.3 Right to Restriction of Processing – to request the Company to suspend the use of your personal data in any of the following cases:
​
5.3.1 During the period when the Company is verifying the accuracy, completeness, and currency of your personal data as per your request
​
5.3.2 When your personal data is collected, used, or disclosed unlawfully
​
5.3.3 When the data is no longer necessary for the purposes notified to you but you wish the Company to retain it to establish legal claims
​
5.3.4 When the Company is proving lawful grounds or necessity to process your personal data after you have objected to its collection, use, or disclosure
​
5.4 Right to Object to the collection, use, or disclosure of your personal data, unless the Company has legal grounds to deny your request (e.g., the Company can demonstrate that the processing has more compelling lawful grounds, or it is for legal claims or public interest tasks under the Company’s duties)
​
6. Retention Period of Personal Data
​
The Company retains your personal data for the following durations:
​
6.1 For learners, service users, contractual parties, and various service providers of the Company – 10 years from the end of your relationship with the Company
​
6.2 For Company employees – 5 years from the end of your relationship with the Company
​
6.3 For users of the website www.blcenglish.co.th – 3 years from the date the Company receives the personal data
​
6.4 For other related persons – 3 years from the date the Company receives the personal data
​
After the above periods have passed, the Company will delete or destroy your personal data when it is no longer necessary for the purposes you were informed of. However, if the Company still needs to retain some data for your benefit – for instance, if you have exercised a legal right or are involved in a dispute or legal case with the Company – the Company reserves the right to retain such data until the matter is resolved or a final order or judgment has been issued.
​
7. Cookies
​
The Company collects and uses cookies as well as other similar technologies on websites under the supervision of the Company, such as www.blcenglish.co.th or on your devices. This is for the purpose of ensuring the security of the Company’s services and to provide you, as a user, with convenience and a better experience when using the Company’s services. This information will also be used to improve the Company’s website to better match your needs. You can configure or delete cookie usage by yourself from the settings in your web browser.
​
8. Personal Data Security Measures
​
The Company has appropriate personal data security measures, both technical and administrative, to prevent data loss or unauthorized access, destruction, usage, modification, alteration, or disclosure of personal data. These measures are in accordance with the Company’s Information Security Policy.
​
In addition, the Company has established a Privacy Policy and publicly announced it organization-wide, along with operational guidelines to ensure security in the collection, use, and disclosure of personal data, maintaining the Confidentiality, Integrity, and Availability of personal data. The Company will review this policy, including this announcement, at appropriate intervals.
​
9. Personal Data of Minors, Incompetent Persons, and Quasi-Incompetent Persons
​
The Company acknowledges that when collecting personal data requiring consent, and where the data subject is a minor, an incompetent person, or a quasi-incompetent person, the Company will not collect such personal data unless consent is obtained from the lawful guardian, custodian, or curator, as the case may be, in accordance with legal requirements.
​
If you, or the lawful guardian/custodian/curator, object to the collection, accuracy, or any action such as requesting to rectify personal data, the Company will record such objection as evidence.
​
In cases where the Company is unaware that the data subject is a minor, incompetent, or quasi-incompetent person, and later finds that personal data was collected without consent from the lawful guardian/custodian/curator, the Company will promptly delete or destroy such data unless there are other lawful grounds beyond consent to collect, use, or disclose such data.
​
The Company may deny the rights mentioned in paragraph two if required by law or if the personal data has been anonymized or cannot be used to identify you.
​
10. Services by Third Parties or Sub-Processors
​
Where necessary, the Company may assign or outsource third parties (personal data processors) to process personal data on behalf of or in the name of the Company. These third parties may offer services such as hosting, outsourcing, cloud computing services/providers, or other similar contract-based services.
​
When assigning a third party to act as a personal data processor, the Company will enter into an agreement specifying the rights and obligations of the Company (as the data controller) and the third party (as the data processor), including details on the types of personal data to be processed, the purposes, processing scope, and any other relevant agreements. The data processor must process data only within the scope specified and only per the Company’s instructions—not for any other purposes.
​
If the data processor assigns a sub-processor to process personal data on its behalf, the Company will require that the data processor enters into an agreement with the sub-processor that meets or exceeds the standards of the agreement between the Company and the processor.
​
11. Links to External Websites or Services
​
The Company's website or services may contain links to third-party websites or services, which may have privacy policies or notices that differ from this announcement. The Company recommends that you study the privacy policies or notices of such websites or services to learn more about them before using them. The Company is not involved with and has no control over the personal data protection measures of such websites or services and cannot be held responsible for the content, policies, damages, or actions resulting from third-party websites or services.
​
12. Access to Personal Data
​
The Company limits access to your personal data only to persons authorized and involved in the collection, use, and disclosure of personal data related to this processing activity. The Company will ensure that such persons strictly comply with this announcement.
​
13. Changes to the Privacy Notice
​
The Company may consider revising, modifying, or updating this announcement as deemed appropriate and will notify you via the website www.blcenglish.co.th, indicating the date of the latest version. However, the Company recommends that you regularly check for the latest version, especially before disclosing any personal data.
​
Your use of services under this processing activity signifies your acknowledgment and agreement to the terms of this announcement. If you do not agree, please stop using the services. Continued use after changes are posted means you have acknowledged such changes.
​
14. Contact Information
​
You may contact us regarding this privacy notice at:
​
14.1 Data Controller
​
Name: Best Language Consultant Co., Ltd.
Contact Address: No. 37,39 Rattanathibet Road, Bang Krasor Subdistrict, Mueang Nonthaburi District, Nonthaburi Province
Contact Channels:
​Email :
Contact Center : 061 568 1996