Privacy Policy
Last Updated October 2026
TDSO (Teacher Development Support Organisation) is committed to protecting your privacy and handling your personal data responsibly. This policy explains how we collect, use, and protect information when you interact with our organisation.
Who We Are
TDSO is a registered NGO in Cambodia (registration number 10968), operating from our Centre of Competence in Siem Reap. For data protection purposes, TDSO is the data controller for personal information collected through this website and our programmes.
Contact for data protection enquiries: TDSO Centre of Competence Siem Reap, Cambodia Email: privacy@tdso.ngo
Information We Collect
Website visitors When you visit our website, we may collect technical information including your IP address, browser type, pages visited, and time spent on the site. This information is collected through cookies and similar technologies to help us understand how visitors use our site and to improve your experience.
Programme participants When you participate in our training programmes, we collect information necessary for programme administration, including your name, contact details, school affiliation, professional role, and programme attendance and completion records. This information is stored in our CiviCRM database.
Newsletter subscribers If you subscribe to our newsletter, we collect your email address and any preferences you provide.
Contact form submissions When you contact us through our website, we collect the information you provide in your message.
How We Use Your Information
We use personal information for the following purposes:
- Administering and delivering our training programmes
- Tracking programme participation and professional development progress
- Communicating with programme participants and partners
- Responding to enquiries
- Sending newsletters to subscribers
- Improving our website and services
- Meeting our reporting obligations to funding partners and government authorities
- Complying with legal requirements
Legal Basis for Processing
We process personal data on the following legal bases:
- Contractual necessity: Processing required to deliver programmes you have enrolled in
- Legitimate interests: Processing necessary for our educational mission, including programme improvement and impact measurement
- Consent: Where you have given explicit consent, such as newsletter subscriptions
- Legal obligation: Where required by Cambodian law or regulations
Data Sharing
We may share personal information with:
- Ministry of Education, Youth and Sport (MoEYS): Programme participation data as required under our partnership agreements
- Teacher Education Institutions: Information about participants enrolled through TEI partnerships
- Funding partners: Aggregated, anonymised data for reporting purposes
- Service providers: Third parties who help us deliver our services (e.g., email providers), under appropriate data protection agreements
We do not sell personal information to third parties.
International Data Transfers
As an international organisation, we may transfer data between Cambodia and other countries where our partners or service providers operate. Where data is transferred outside Cambodia, we ensure appropriate safeguards are in place.
Protection against foreign government access
TDSO selects its hosting and service providers with particular attention to data protection, privacy and the jurisdiction under which they operate. We do not intentionally store personal data on servers operated by providers subject to the jurisdiction of the United States under the CLOUD Act, or by providers subject to foreign legislation that could compel access to personal data, where such access would be inconsistent with our data protection commitments. We assess the location of data storage, the jurisdiction of our service providers and the safeguards available to protect personal data against unauthorised access, including access by government authorities.
TDSO currently stores its data on servers located in Singapore, with backups stored in Singapore or Germany. The servers are owned and managed by service providers established in the European Union, which are subject to the General Data Protection Regulation (GDPR), or in Australia, where applicable data protection obligations include the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). We take the jurisdictions in which our service providers operate and the associated data protection frameworks into account when selecting our providers and safeguarding personal data.
TDSO currently continues to use Microsoft Office 365 for certain services, which constitutes an exception to the principles outlined above, given Microsoft’s US jurisdictional exposure. We are preparing to migrate to privacy-compliant alternatives that better align with our data protection principles, and will update this privacy policy page as soon as the migration is done.
Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Programme participation records: Retained indefinitely as part of professional development documentation
- Contact form submissions: Retained for two years
- Newsletter subscriptions: Until you unsubscribe
Your Rights
Depending on your location, you may have rights regarding your personal data, including:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdrawal of consent: Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@tdso.ngo. We will respond within 30 days.
Cookies
Our website uses cookies to improve your browsing experience. You can control cookie settings through your browser. Essential cookies are required for the website to function; analytics cookies help us understand how visitors use the site.
Children’s Privacy
Our programmes serve adult educators. We do not knowingly collect personal information from children through our website. Our Practice School operates under separate data protection arrangements appropriate for educational settings involving minors.
Changes to This Policy
We may update this policy periodically. Significant changes will be notified through our website. The “last updated” date indicates when the policy was most recently revised.
Contact Us
For questions about this privacy policy or our data protection practices:
TDSO Centre of Competence Siem Reap, Cambodia Email: privacy@tdso.ngo