Privacy Policy
BBS Portal is committed to protecting the personal data of students, parents, and staff in accordance with Thailand's Personal Data Protection Act (PDPA) and GDPR principles.
1 Data We Collect
| Data type | Source | Purpose |
|---|---|---|
| Name, email, role | Google Workspace / enrolment | Identity & access control |
| Class, student ID | School SIS | Programme enrolment |
| Enrolments, invoices, payments | In-portal actions | School finance & programmes |
| Parent email & name | CSV CSV import by school admin | Link parents to student guardian slots |
| System audit logs | Server | Security & compliance audit |
2 Parent Data & Student Linking
BBS Portal allows school administrators to pre-populate parent guardian slots by importing parent data via CSV. Parent accounts may also be linked to student records through Google Classroom roster data or the school's student information system.
Imported via CSV
- Parent display name
- Parent email address
- Connected student IDs
Not imported
- Student portfolios or class content
- Messages or prior communications
- Passwords or login credentials
- Any other sensitive profile data
- No accounts are created automatically — parents must sign in with Google One-Tap to activate their account.
- Imported parent data is never shared with any third party.
- School administrators can remove or correct this data at any time via the dashboard.
- Parents may request deletion by contacting school administration.
BBS Portal is an independent school platform with no direct connection to any external service. Parent data is imported only via CSV files or the Google Classroom API, authorised by the school's Google Workspace administrator. The school retains full ownership of all data imported into BBS Portal.
3 How We Use Data
- To deliver school enrolment, invoicing, and communication services.
- To manage role-based access control and protect user accounts.
- To send school-related notifications, such as parent invite links and invoice emails.
- To improve platform quality and user experience.
4 Retention and Security
Personal data is retained only as long as required for educational operations and legal obligations. The system uses Firebase Auth for identity, HTTPS encryption in transit, and Google Cloud Firestore with strict security rules.
5 Data Sharing
BBS Portal does not sell, rent, or share personal data with external parties, except infrastructure providers (Google Firebase, Gmail API) operating on behalf of the school under data processing agreements.
6 Your Rights
Under Thailand PDPA, you have the right to access, correct, delete, or port your personal data. Please contact school administration or email the BBS Portal system administrator.
7 Contact
Bangkok Bilingual School · 68 Soi Ramkhamhaeng 43/1, Bangkok 10240
Email: admin@bbs.ac.th