PRIVACY NOTICE

Sudlon Integrated School may collect personal information when you interact with our website or school services. This includes:

• Student enrollment data — names, birth dates, addresses, parent/guardian information, and academic records submitted during enrollment.
• Contact information — email addresses, phone numbers, and messages submitted through contact forms or newsletter subscriptions.
• Website usage data — anonymized analytics data such as page views, browser type, and device information to help improve our website experience.
• MySIS account data — login credentials and role-based profile information for students, faculty, and administrators using the MySIS platform.

We process your personal data on one or more of the lawful bases recognized by the Data Privacy Act of 2012:

• Consent — given by you, or by a parent or legal guardian for learners who are minors, when you enroll or submit information through our forms.
• Compliance with a legal obligation — including the mandates and reporting requirements of the Department of Education (DepEd) and other government agencies.
• Legitimate school functions — the legitimate educational and administrative purposes of the school, balanced against your rights and freedoms.

We use the personal information we collect for the following purposes:

• Educational administration — managing enrollment, maintaining student records, and communicating with parents and guardians.
• Communication — sending school announcements, newsletters, event invitations, and important updates.
• Website improvement — analyzing anonymous usage data to enhance navigation, content, and overall user experience.
• Legal compliance — fulfilling requirements mandated by the Department of Education (DepEd) and other government agencies.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure hosting infrastructure with SSL/TLS encryption.
• Role-based access controls for the MySIS platform and administrative systems.
• Regular security reviews and updates to our digital systems.
• Staff training on data privacy and information security best practices.

Sudlon Integrated School does not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Government agencies — when required by law or by regulatory bodies such as DepEd, CHED, or other authorized agencies.
• Service providers — trusted third-party services that help us operate our website and school systems, bound by confidentiality agreements.
• Legal obligations — when disclosure is necessary to comply with a legal process, court order, or government request.

Some of the trusted service providers that help us operate this website and our systems — such as secure cloud hosting, email, website analytics, and security or anti-spam services — may store or process data on servers located outside the Philippines. Where this occurs, we take reasonable steps to ensure your personal data remains protected in accordance with the Data Privacy Act of 2012 and is used only for the purposes described in this notice.

We keep personal data only for as long as necessary to fulfil the purposes described in this notice, or as required by law and DepEd records-management rules. Certain student records — such as permanent records and Form 137 / SF10 — are retained permanently as required by DepEd. Other records are kept only for the period required by applicable regulations, after which they are securely disposed of.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• Be informed — to know whether your personal data is being processed, and for what purpose.
• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete personal data.
• Erasure or blocking — request the deletion or blocking of your personal data when it is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purposes it was collected.
• Object — object to the processing of your personal data under certain conditions.
• Data portability — request a copy of your data in a structured, commonly used, electronic format.
• Damages — be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unauthorized use of your personal data.
• File a complaint — lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact us using the information provided below.

As an educational institution serving minors, we are especially committed to protecting the privacy of children. Personal data of students under 18 years of age is collected and processed only with the consent of their parents or legal guardians, and solely for educational purposes. We adhere to DepEd's guidelines on student data privacy and the Data Privacy Act of 2012.

We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or school policies. Any significant changes will be communicated through our website. We encourage you to review this page periodically.