Data Privacy Notice

This Data Privacy Notice is issued by Saint Joseph School of Fairview Inc. (SJSFI) in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. This notice explains how we collect, use, store, and protect your personal information.

Effective Date: January 1, 2025

Data Controller Information

Personal Information We Collect

SJSFI collects and processes the following types of personal information:

Purpose of Data Collection

We collect and process personal information for the following legitimate purposes:

• Student enrollment, admission, and academic record management
• Provision of educational services and extracurricular activities
• Communication with students, parents, and guardians
• Health and safety monitoring and emergency response
• Financial transactions and billing
• Compliance with DepEd, CHED, and other regulatory requirements
• Employment and human resource management
• School security and campus safety
• Research and statistical analysis for educational improvement
• Alumni relations and institutional advancement

Legal Basis for Processing

SJSFI processes personal information based on the following legal grounds:

• Consent: Express consent from data subjects or parents/guardians for minors
• Contract: Performance of enrollment agreements and employment contracts
• Legal Obligation: Compliance with DepEd, CHED, BIR, and other government requirements
• Vital Interests: Protection of health and safety of students and staff
• Legitimate Interest: Educational purposes and institutional operations

Data Sharing and Disclosure

SJSFI may share personal information with the following parties:

• Department of Education (DepEd) and Commission on Higher Education (CHED)
• Philippine Association of Colleges and Universities Commission on Accreditation (PACUCOA)
• Philippine Accrediting Association of Schools, Colleges and Universities (PAASCU)
• Healthcare providers for medical emergencies
• Law enforcement agencies when required by law
• Third-party service providers (payment processors, IT vendors) under strict confidentiality agreements
• Other educational institutions for transfer students
• Potential employers with student consent for recommendation purposes

Data Security Measures

SJSFI implements appropriate technical, organizational, and physical security measures to protect personal information:

• Secure storage systems with access controls and encryption
• Regular backup and disaster recovery procedures
• Employee training on data protection and confidentiality
• Restricted access to personal information on a need-to-know basis
• Secure disposal of documents and electronic media
• Regular security assessments and system updates
• Incident response procedures for data breaches

Data Retention

SJSFI retains personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Student Records: Permanently retained as required by DepEd regulations
• Employee Records: Retained for the duration of employment plus applicable statutory periods
• Financial Records: Retained in accordance with BIR and accounting requirements
• Website Data: Automatically deleted after reasonable periods unless consent is given
• CCTV Footage: Retained for 30 days unless required for investigation purposes

Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights:

• Right to be Informed: Know how your personal information is processed
• Right to Access: Request copies of your personal information
• Right to Object: Object to certain types of processing
• Right to Erasure/Blocking: Request deletion or blocking of personal information
• Right to Rectification: Request correction of inaccurate personal information
• Right to Portability: Request transfer of personal information in a structured format
• Right to Damages: Seek compensation for damages caused by processing violations

To exercise these rights, please contact our Data Protection Officer using the contact information provided above. Please note that some rights may be limited by legal or regulatory requirements.

Updates to This Notice

SJSFI reserves the right to update this Data Privacy Notice as necessary to comply with legal requirements or changes in our data processing practices. Any material changes will be communicated to affected data subjects through appropriate channels. The updated notice will be posted on our website with the effective date clearly indicated.

Complaints and Inquiries

If you have any questions, concerns, or complaints regarding this Data Privacy Notice or our data processing practices, please contact us immediately. You may also file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.