Privacy Policy
PRIVACY POLICY
Effective date: 1 October 2026
This Privacy Policy explains how Kiidu (Thailand) Co., Ltd. (“Kiidu”, “we”, “us” or “our”) collects, uses, discloses, stores and protects personal data when you visit our website, create or use an account, request or provide care services, communicate with us, or otherwise interact with our services.
1. Who this Policy applies to
This Policy applies to parents and customers, nannies and other caregivers, tutors, household staff, job applicants, website visitors and people who communicate with Kiidu. Where information relates to a child, the parent or lawful guardian should provide information only as necessary for the requested care service and exercise rights on the child’s behalf where legally authorized.
2. Personal data we may collect
Depending on how you interact with Kiidu, we may collect: identity and contact details such as name, email, telephone number, address, date of birth where necessary and account identifiers; customer and booking information such as care requirements, schedule, service location, messages, booking history, invoices and payment status; caregiver and applicant information such as employment history, education, qualifications, certificates, skills, language ability, references, interview notes and availability; verification information such as identity-document details and records of checks Kiidu actually performs; technical and usage data such as IP address, device and browser information, log data, pages visited and cookie data, depending on the tools enabled; and communications, complaints, reviews and feedback.
Sensitive personal data may include criminal-record information arising from police checks for Thai and Myanmar caregivers, and health information where a medical check-up is requested by a customer. Kiidu will handle such data only where necessary, a lawful basis exists, and any required specific consent or legal exception applies. A police check or medical check-up will be described as completed only when it has actually been performed and recorded.
Please do not submit sensitive personal data unless it is requested for a clear, relevant purpose through an appropriate channel. We aim to collect only data reasonably necessary for the purposes described in this Policy.
3. How we obtain personal data
We may receive personal data directly from you; from a parent or lawful guardian; from a caregiver or applicant; from people you identify as referees; or from publicly available sources where lawful and relevant. We may also collect technical information automatically when you use the website. If a customer requests a medical check-up, relevant information may be received from the individual concerned or the medical provider involved, where lawful and necessary. If you provide another person’s data, you should have authority to do so and inform them where required by law.
4. Why we use personal data and our legal bases
We use personal data for specified and legitimate purposes and rely on an applicable legal basis under Thai law, which may include contractual necessity, compliance with a legal obligation, legitimate interests where permitted, consent, or another lawful basis. Depending on the circumstances, purposes include:
• Creating and administering accounts, responding to enquiries, arranging interviews, matching customers with caregivers, managing bookings and providing customer support.
• Assessing caregiver suitability, reviewing qualifications and references, and conducting police checks for Thai and Myanmar caregivers as part of Kiidu’s screening process. A medical check-up may be arranged if requested by a customer, subject to applicable law and any required consent.
• Processing payments, issuing invoices, maintaining business records, preventing fraud and addressing disputes.
• Sending service updates, safety notices and policy changes and, where permitted, marketing messages. You may opt out of marketing communications.
• Maintaining website security, troubleshooting issues, understanding service usage and improving our website and services.
• Complying with applicable laws, responding to lawful requests, establishing or defending legal claims, and protecting the rights and safety of users and others.
Where we rely on consent, you may withdraw it subject to applicable law. Withdrawal does not affect processing lawfully carried out before withdrawal, and another lawful basis may permit continued processing.
5. Children’s personal data
Kiidu’s services may involve information about children because parents request childcare or related services. We process children’s information only where relevant and necessary for the service, and seek consent from a parent, guardian or other legally authorized person when required by law. Please provide only details needed to arrange safe and appropriate care. Our services are directed to adults who arrange care; children should not create accounts or submit information independently.
6. When we disclose personal data
We may disclose relevant personal data, subject to applicable law and appropriate safeguards, to:
• • The customer’s customer ID and related account details to prepare, issue and administer the contract or service agreement for using Kiidu’s services, verify the customer’s account, link the agreement to the correct customer, manage bookings and maintain service records. We may also share relevant information with the caregiver involved in a potential placement, to the extent needed to assess suitability, arrange an interview or provide the booked service.
• Authorized staff and service providers supporting website hosting, communications, customer support, payment processing, security, document handling or other operational functions.
• Screening or verification providers, referees, professional advisers, insurers or other parties where relevant, lawful and necessary for the stated purpose.
• Government authorities, regulators, courts, law enforcement or other parties where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims.
• A successor or relevant transaction party in connection with a proposed or completed merger, restructuring, financing or sale of all or part of our business, subject to applicable law and safeguards.
Kiidu does not currently use third-party screening or verification companies. We may disclose personal data where necessary to provide the service you request, to our authorized staff, to a customer or caregiver involved in a potential placement, or where disclosure is required or permitted by law. We do not sell personal data or disclose it to third parties for their unrelated marketing purposes. If our data-sharing practices change, we will update this Policy where required.
7. International transfers
Kiidu does not currently work with third-party screening or verification companies. If Kiidu uses systems or service providers that transfer personal data outside Thailand, any international transfer will be handled only where permitted by Thai law and with required safeguards or an applicable legal exception. Kiidu should verify whether any website hosting, email, analytics or other technical systems involve international transfers before publishing this section.
8. Cookies and similar technologies
Our website may use essential cookies or similar technologies to operate securely, remember settings and support requested features. If analytics, advertising or other non-essential technologies are enabled, we will explain their purposes and obtain consent where required. You can manage cookies through available website controls and your browser settings. Blocking certain cookies may affect functionality. Kiidu should publish a separate Cookie Policy or cookie notice if required by the actual website configuration.
9. Data security
Kiidu uses appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. Access should be limited to people who need the information for their work, and service providers should be subject to appropriate confidentiality and data-protection obligations. No method of transmission or storage can be guaranteed to be completely secure. Kiidu will handle personal data breaches in accordance with applicable legal requirements.
10. Data retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, recordkeeping, legal compliance, dispute resolution and the establishment or defense of legal claims. Retention periods may differ by data category. When data is no longer required, we will delete, destroy or anonymize it unless retention is required or permitted by law. Kiidu should establish and follow a documented retention schedule before publication; this Policy does not state fixed periods that have not been verified.
11. Your rights
Subject to conditions, exceptions and procedures under applicable law, you may have the right to request access to or a copy of your personal data, request correction, request deletion or destruction, request restriction of processing, object to certain processing, request data portability where applicable, withdraw consent, and lodge a complaint with the competent authority. Some requests may be limited or refused where the law permits or requires it. We may need to verify your identity and authority before responding.
12. How to make a privacy request
To ask a privacy question or exercise a data-subject right, contact Kiidu using the details below and describe your request. Use the email address associated with your account where possible and do not send unnecessary identity documents or sensitive information by ordinary email. We will verify the request as appropriate and respond within the period required by applicable law. If we cannot fulfill a request, we will explain the reason where required.
Privacy contact: [email protected]
Telephone: +66 2 001 3846
Website: https://kiidu.com/
These contact details must be verified before publication. If Kiidu has appointed a Data Protection Officer or designated privacy contact, add the correct details here.
13. Third-party websites and services
Our website may link to third-party websites or services. Those parties operate under their own privacy terms, and Kiidu does not control their practices. Please review their policies before providing personal data to them.
14. Changes to this Policy
We may update this Policy to reflect changes in our services, data practices or legal requirements. We will post the updated version on this page and revise the effective date. Where required by law, we will provide additional notice or obtain consent before making material changes to how personal data is processed.
15. Relationship with other Kiidu terms
This Policy should be read together with Kiidu’s Terms & Conditions and any applicable Parent Policy, caregiver agreement, booking terms or separate privacy notice. If a specific service requires additional information about data processing, Kiidu may provide a separate notice at the relevant point of collection.
