Data Protection

Thailand PDPA & Data Protection

Privacy By Design. Built for families, trusted by schools, and compliant with Thailand's Personal Data Protection Act and international best practices.

Privacy By Design

Arkilius is designed around modern privacy and data protection principles, including Thailand's Personal Data Protection Act (PDPA), GDPR-inspired best practices, and data minimization standards.

What Information Does Arkilius Store?

Only information necessary for student safety and emergency response may be stored:

Parent & Guardian Contacts
Emergency Contacts
Medical Alerts
Allergies
Emergency Instructions
Guardian Permissions

Optional:

  • Blood Group
  • Preferred Hospital
  • Insurance Provider

What Information Does Arkilius NOT Require?

Arkilius does not require families to upload sensitive documents. These remain under family control unless voluntarily shared:

Passports
Birth Certificates
Medical Reports
Insurance Policies
Visa Documents
Legal Documents

Sensitive Medical Information

Medical information is classified as sensitive personal data. Arkilius applies:

  • Explicit Parent Consent
  • Purpose Limitation
  • Role-Based Access Controls
  • Encryption In Transit & At Rest
  • Full Audit Logging
  • Data Minimization

Only authorized personnel may access emergency medical information.

Blood Group Information

Blood group information is optional.

Parents decide whether to provide it.

If stored, it is treated as sensitive emergency information and protected accordingly.

Who Can Access Emergency Information?

Parents

Full access to their child's information.

Authorized Guardians

Access only as permitted by parents.

School Nurses

Access to approved medical information.

Teachers & Staff

Access only to information necessary for safeguarding and emergency response.

Public Scanners

No access to personal information.

Family-Controlled Documents

Arkilius supports secure document request workflows. Documents may remain stored in:

OneDrive
Google Drive
Dropbox
Family Office Systems
School Document Systems

Families remain in control.

Document Request Workflow

1School Requests Document
2Parent Receives Request
3Parent Reviews
4Parent Shares Securely
5School Reviews
6Access Expires

Arkilius is the workflow layer, not the permanent document repository.

Data Ownership

Family Data

Owned by the Family

  • Emergency Contacts
  • Medical Alerts
  • Preparedness Data

School Data

Owned by the School

  • Student Records
  • Attendance
  • School Safeguarding Information

Platform Data

Owned by Arkilius

  • Patch Status
  • Audit Logs
  • System Performance Metrics

Deployment Options

Arkilius Secure Cloud

Arkilius Secure Cloud

Arkilius securely hosts emergency information.

Best for most schools.

Arkilius Data Sovereignty

Arkilius Data Sovereignty

Schools retain primary custody of student information on their own infrastructure.

Best for enterprise and government institutions.

Our Commitment

No Sale of Personal Data
No Advertising Based on Student Information
Families Own Family Data
Schools Own School Data
Privacy By Design
Consent-Based Access
Full Audit Trail
Data Minimization
Secure Emergency Response

Protect the Child.

Protect the Data.