Updated and effective from: January 1, 2026
1. Introduction and Scope of Application
- Introduction: KidsOnline One Member Company Limited (hereinafter referred to as “KidsOnline” or “We”) is committed to protecting the privacy and personal data of all users and customers in accordance with Vietnamese laws.
- Scope of Application: This Policy applies to all activities of collecting, storing, using, sharing, protecting, and processing personal data of data subjects when accessing the website http://www.kidsonline.io, using the application, and the KidsOnline preschool education management system.
2. Definition of Personal Data
We process two categories of personal data, including:
- Basic Personal Data: Full name; date of birth; gender; address; phone number; email address; network connection information (IP address, access history, browser information), personal images, and other basic identifying information provided by users.
- Sensitive Personal Data: Information related to children’s (students’) private lives; health or medical data recorded on the system (such as height, weight, health status of preschool children on KidsOnline); location information of individuals determined via location services to serve attendance tracking and student pickup/drop-off (if permitted).
3. Data Processing Principles
KidsOnline commits to strictly complying with the core principles of: Lawfulness (processing only with consent); Transparency; Purpose limitation; Data minimization (collecting only necessary information); Accuracy; and Security and Safety.
4. Types of Data Collected
- Registration and Contact Information: Name of the educational institution, address, website/Facebook page, contact person, position, email, and phone number.
- Preschool Educational Profile Information: Student’s full name, date of birth, class; profile picture; parent’s or legal guardian’s full name and contact phone number; attendance logs, academic evaluations, health, height, weight, and nutritional menus.
- Technical Information: IP address, browser type, access time, cookies, and mobile device identifiers.
5. Purposes and Bases for Data Processing
- Purposes: Setting up and managing user accounts; providing interactive and communication features between the school and families (sending notifications, health updates, attendance tracking, nutrition bulletin boards); providing technical support; and performing internal reporting or statistics to improve service quality.
- Legal Bases: The voluntary and explicit consent of the data subject (or parent/legal guardian of students under 16 years old); the performance of service contracts signed with educational institutions; compliance with legal obligations prescribed by the Ministry of Education and Training and current Vietnamese laws.
6. Methods of Data Collection
- Direct Collection: Users actively declare information or the educational institution (KidsOnline’s partner) directly inputs data onto the system under their authority and service agreement.
- Automatic Collection: Via tracking technologies such as cookies and system logs when users interact with the website http://www.kidsonline.io and KidsOnline applications.
7. Sharing Data with Third Parties
KidsOnline is committed to not selling or disclosing users’ personal information to third parties for unauthorized commercial purposes. We only share data in the following cases:
- Infrastructure service partners (cloud hosting, integrated online tuition payment gateways) under strict personal data confidentiality agreements.
- Upon legal written requests from competent State authorities.
- In emergency situations necessary to protect the life and health of users, or to protect the legitimate rights and interests of KidsOnline under the law.
8. Data Retention and Deletion
- Retention: Personal data is stored for as long as the user’s account is active on the system or until the service contract between KidsOnline and the school terminates, unless otherwise required by law.
- Deletion: Upon a valid request from the data subject or upon service termination, KidsOnline will completely delete or irreversibly anonymize personal data from server systems.
9. Rights and Obligations of Data Subjects
- Rights: The right to be informed and to consent; to access and correct; to withdraw consent; to request data deletion; and to restrict or object to data processing.
- Obligations: Users are obligated to provide accurate and lawful personal information, and to self-protect their account information and passwords.
10. Protection of Children’s Data
- We only collect and process the personal data of children (under 16 years old) after obtaining the consent of their parents or legal guardians in accordance with the Vietnam Law on Children and the Law on Personal Data Protection 2025.
- We obtain the consent of children from full 7 years of age or older if system features require direct interaction from the child.
- We immediately cease processing, delete, or destroy children’s data if parents or legal guardians withdraw consent, or upon request by competent authorities.
11. Information Security Measures
- Applying HTTPS/SSL secure transfer protocols to encrypt all transmitted data; implementing one-way encryption for user passwords.
- Restricting internal access to personal data; storing systems at international standard data centers in Vietnam equipped with firewalls, automatic malware scanning, and periodic backups.
12. Data Breach Incident Handling Procedure
In the event of a cybersecurity incident or unauthorized intrusion causing a risk of personal data leakage, loss, or destruction, KidsOnline will:
- Immediately isolate the affected area, prevent the incident from spreading, and patch the security vulnerability.
- Report the incident to the Department of Cybersecurity and High-Tech Crime Prevention (Ministry of Public Security) within a maximum of 72 hours.
- Directly notify affected users to guide them on preventive measures.
13. Contact Information for Exercising Data Subject Rights
For any inquiries, feedback, or to exercise your rights, please contact our Personal Data Protection Department via:
- Governing Entity: KidsOnline One Member Company Limited
- Office Address: 791 Building, No. 27-31/59 Lang Ha Street, O Cho Dua Ward, Hanoi
- Hot line: 1900 0362 (applies to calls within Vietnam only)
- Email: KidsOnline@kidsonline.io; kidsonline@omt.vn
14. Policy Updates
This Privacy Policy may be modified and updated at any time to ensure compliance with Vietnamese law and operational realities. New versions will be published on http://www.kidsonline.io. Continued use of the services after updates take effect constitutes consent to the modified terms.