Legal

Privacy Policy

How we collect, use and protect your personal information.

Effective date: To be confirmed upon publication.

1. Introduction and Data Controller

Marine Certification School ("the school", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website, submit a course enquiry, book training, or otherwise contact us.

We process personal information in accordance with applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

Marine Certification School, based at Ocean Marina Pattaya, Thailand, is the data controller for the personal information described in this policy. Our registered legal entity details will be added to this page upon confirmation.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

  • Name and contact information (such as email address and telephone number)
  • Country of residence, and date of birth and nationality where required for course enrolment or certification
  • Course enquiries and booking details, including your preferred training dates
  • Student attendance and assessment records
  • Identification and certification documents, where required for enrolment or certification
  • Payment and invoice records, where a booking is confirmed and paid
  • Website technical information (such as pages visited), collected anonymously
  • Marketing preferences, where you have chosen to share them
  • Medical or safety-related information, only where genuinely necessary for safe participation in practical training

Our website enquiry form collects only your name, email address, telephone number, country, course of interest, preferred training date, number of students and your message. Other information listed above is collected only where it becomes relevant, for example during enrolment or certification.

3. How We Collect Personal Information

We collect personal information:

  • Directly from you, when you submit an enquiry form, contact us by email, telephone, Facebook Messenger or WhatsApp, or communicate with us during booking and training
  • During training and assessment, where attendance and performance records are created
  • Automatically, through anonymous website usage statistics (see section 10)

4. Purposes and Legal Bases for Processing

We process personal information for the following purposes:

  • Responding to enquiries and communicating about courses (legitimate interest and steps prior to entering a contract)
  • Arranging, administering and delivering training bookings (performance of a contract)
  • Meeting legal, safety and certification requirements (legal obligation and legitimate interest)
  • Sending marketing communications, only where you have given consent
  • Improving our website through anonymous statistics (legitimate interest; non-essential analytics only with your consent)

5. Course Bookings and Student Records

When a booking is confirmed, we keep records needed to administer your training, including contact details, attendance, assessment results and certification documentation.

Access to student records is restricted to authorised school personnel who need the information to perform their duties.

6. IYT Worldwide Certification and Data Sharing

For courses following IYT Worldwide standards, relevant student information may be shared with IYT Worldwide for authorised training administration, assessment, or certification purposes, where applicable.

Marine Certification School's IYT Partner School application is pending. We do not claim certification authority that has not been verified, and certificates may only be issued or processed through properly authorised arrangements.

7. Payment Information and Payment Providers

Our website does not take online payments. Enquiries submitted through the website are requests only, and no payment card or bank details are collected through the website.

Where a booking is confirmed and paid, payment and invoice records are kept as required for accounting and legal purposes. Any payment provider used will process your payment information in accordance with its own privacy terms.

8. Medical and Safety-Related Information, Where Applicable

We may ask for medical or safety-related information only where genuinely necessary to assess whether you can participate safely in practical training, or to respond to an incident.

This information is treated with additional care, access is restricted, and it is not used for any other purpose.

9. Marketing Communications and Consent

We will only send you marketing communications (such as news about courses) where you have given your consent. Marketing consent is optional and is never a condition of booking a course.

You may withdraw your consent at any time by contacting us using the details in the contact section below.

10. Website Analytics and Cookies

Our website collects anonymous, first-party usage statistics (such as pages visited) that do not identify you personally and do not use tracking cookies.

With your consent, we would also like to use Google Analytics to understand how visitors find us. Google Analytics is non-essential: it is only enabled if you choose "Accept" in the cookie consent banner shown when you first visit. You can decline without affecting your use of the website, and you can change your choice at any time by clearing your browser's stored site data, which will show the banner again.

Essential storage is limited to what is needed for the website to function (for example, remembering your cookie choice).

11. Sharing Information with Service Providers

We use a small number of service providers to operate our website and store enquiry records (for example, website hosting and database services). These providers process information only on our instructions and with appropriate safeguards. We do not sell personal information to third parties.

12. International Data Transfers

Some of our service providers may store or process information outside Thailand. Where personal information is transferred internationally, we take steps to ensure it remains protected in accordance with the PDPA. Information shared with IYT Worldwide for certification purposes may also be processed outside Thailand.

13. Data Retention and Secure Deletion

We keep personal information only for as long as necessary for the purposes described in this policy, or as required by applicable law (for example, accounting and certification records). When information is no longer needed, it is securely deleted or anonymised. Specific retention periods will be added to this page once confirmed by the school.

14. Personal Data Security

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. Access to enquiry and student records is restricted to authorised personnel, and identification documents, student records, payment information and private contact details are never made publicly available.

15. Data Subject Rights Under Thai PDPA

Under the PDPA, and subject to applicable law, you may have the right to:

  • Request access to your personal information
  • Request correction of inaccurate or incomplete information
  • Request deletion or destruction of your information
  • Request restriction of, or object to, certain processing
  • Request a copy of your information in a portable format
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Thai data protection authority

To exercise any of these rights, please contact us using the details in the contact section below.

16. Personal Data Breaches and Notifications

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and, where required by law, the affected individuals, in accordance with the PDPA.

17. Children's Personal Data and Parental Consent

Our courses have minimum age requirements (for example, a minimum age of 16 for the Small Powerboat & RIB Master course). Where a student is below the age at which they can give valid consent under the PDPA, we will obtain consent from a parent or legal guardian before collecting or processing that student's personal information.

18. Third-Party Websites

Our website contains links to third-party services, including Facebook Messenger and WhatsApp, which you may choose to use to contact us. These services are governed by their own privacy policies, and we are not responsible for their data practices. We encourage you to read their policies before using them.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, and the effective date will be updated when changes are made.

Contact Information

If you have any questions about this policy, or wish to exercise your data protection rights, please contact us:

You can also reach us through our Contact Us page.