NEWTOWN SCHOOL OF EXCELLENCE

Online Privacy Policy

Newtown School of Excellence (NSE) is committed to protecting the privacy and security of the individuals whom we have daily interactions and transactions as we conduct our operations and achieve our vision to become an educational institution that provides inclusive education which focuses on the holistic development of students and is geared towards the cultivation of talents and skills that would enable them to accomplish their life goals through the development of core values founded on Christian Living principles, and the promotion of a culture of integrity, hard work, excellence, and social responsibility.

This online privacy policy explains how we, the members of Newtown School of Excellence, handle personal data as defined by RA 10173 otherwise known as the Data Privacy Act of 2012 that we collect thru our website, social media platforms, and other third-party sites that are related and connected to the school. This policy applies to all of NSE’s digital and online assets; however, there may be cases wherein there is a need for more comprehensive privacy policy. This is covered by NSE’s Privacy Manual created and monitored by the school’s Data Privacy Officer. It is important to mention that this policy is a general policy that primarily covers all online assets and that NSE reserves the right to change, amend, and/or modify this policy at any time.

As an overview, this Online Privacy Policy aims to provide information as to how we collect, use, manage, secure, store, and dispose personal information collected from NSE’s digital platforms. Any information you have shared with the school expresses your consent to this policy.

Definition of Terms: Personal Information, Sensitive Personal Information, and Privileged Personal Information

The Data Privacy Act refers to Personal Information as to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.

Privileged Information refers to any and all forms of data which under the Rules of Court and other pertinent laws constitute privileged communication.

Lastly, Sensitive Personal Information refers to personal information:

1. About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
2. About the individual’s health, education, genetic, or sexual life of a person, or to any proceeding from any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings;
3. Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or current health records, licenses or its denials, suspensions or revocation, and tax returns; and
4. Specifically established by an executive order or an act of Congress to be kept classified.

Rights of the Data Subject

The Data Subject, according to the Data Privacy Act, is entitled to:

1. Be informed whether personal information pertaining to him or her shall be, are being or have been processed;
2. Be furnished the information indicated hereunder before the entry of his or her personal information into the processing system or the personal information controller, or at the next practical opportunity:
   1. Description of the personal information to be entered into the system;
   2. Purposes for which they are being or are to be processed;
   3. Scope and method of the personal information processing;
   4. The recipients or classes of recipients to whom they are or may be disclosed;
   5. Methods utilized for automated access, if the same is allowed by the data subject, and the extent to which such access is authorized;
   6. The identity and contact details of the personal information controller or its representative;
   7. The period for which the information will be stored; and
   8. The existence of their rights, i.e., to access, correction, as well as the right to lodge a complaint before the commission
3. Reasonable access to, upon demand, the following:
   1. Contents of his or her personal information that we processed;
   2. Sources from which personal information were obtained;
   3. Names and addresses of recipients of the personal information;
   4. Manner by which such data were processed;
   5. Reasons for the disclosure of the personal information to recipients;
   6. Information on automated processes where the data will or likely be made as the sole basis of any decision significantly affecting or will affect the data subject;
   7. Date when his or her personal information concerning the data subject were last accessed and modified; and
   8. The designation, or name or identity and address of the personal information controller;
4. Dispute the inaccuracy or error in the personal information and have the personal information controller correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable. If the personal information have been corrected, the personal information controller shall ensure the accessibility of both new and the retracted information and the simultaneous receipt of the new and the retracted information by recipients thereof: Provided, that the third parties who have previously received such processed personal information shall be informed of its inaccuracy and its rectification upon reasonable request of the data subject;
5. Suspend, withdraw, or order the blocking, removal, or destruction of his or her personal information from the personal information controller’s filing system upon discovery and substantial proof that the personal information are incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or are no longer necessary for the purposes for which they were collected. In this case, the personal information controller may notify third parties who have previously received such processed personal information; and
6. Be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained, unauthorized use of personal information.

For further information, refer to RA 10173 also known as the Data Privacy Act.

Information that we collect

In order to protect the privacy of NSE’s valuable internal and external stakeholders, we collect information ensuring that privacy and security mechanisms are installed in all of the online assets of the school.

1. When browsing the website, cookies (pieces of information that the website transfers to the computer being used and may be placed in its hard disk for record-keeping purposes) and other tracking technology which collect information are being used. They are used by most websites for the platform to work effectively and efficiently as well as to provide data to the owners of the website. The “First Party” cookies are set up by NSE and can be read by the site and controlled by NSE. Third Party Cookies on the other hand are from Google Analytics.
2. Other information collected when browsing the site and any other digital platform owned by Newtown School of Excellence also makes use of technologies that collect additional information which is not previously mentioned. These information include the following, but are not limited to, IP addresses and System Log Files.s

Processing and Use of the Collected Data

The collected data may be used for the following:

1. Monitoring visitor interaction with the site thru monitoring of web traffic, site interaction, landing pages, frequently visited sites, inquiry monitoring, time spent, website performance issues, and website errors
2. Provide support for troubleshooting, management of inquiries, maintaining safety and security for online visitors, and guiding site improvement thru design and content
3. Analyze demographic information on the site’s performance and use while enforcing regulatory requirements or claims that govern website processes
4. Assist visitors in knowing more about the services provided by NSE.

When you provide information other than your own, you certify that you have obtained the consent and authority of the owner of such information (such as your parents, spouse, children, dependent, or any other person) to allow us to disclose and process such information. You are responsible for ensuring that all personal data you submit to us are accurate, complete and up-to-date.

Transfer and Sharing of collected information

Information may be shared by NSE in cases wherein it is required by law or if such legal disclosure is reasonably necessary; when maintaining security and safety of information collected; and when interacting with third-party service providers that may host or support the services provided in accordance to the requirements of RA10173. However, this is only implemented when proper consent and approval is secured.

Information Security

NSE ensures the confidentiality and availability of the data collected thru the installation of technical, administrative, and organizational processes and procedures that are put in place to safeguard all information collected. The comprehensive security policy is indicated in NSE’s Data Privacy Manual.

Information Retention

NSE retains information collected for a period necessary to complete the purpose outlined in school’s Data Privacy Policy.

Personal Information of Minors

NSE’s digital assets are generally intended for persons ages 18 and up. In the event that information collected, to be collected, or contributed to NSE is that of a minor, prior consent from a parent or a legal guardian should be obtained in accordance to the Data Privacy Act.

Contact Us

For any comment, question or complaint regarding this Privacy Policy, you may contact our Data Protection Officer at:

Address

Newtown School of Excellence
Newtown Boulevard, The Mactan Newtown
Lapu-Lapu City, Mactan, Cebu
Attn: Data Protection Officer

Telephone Number
(032) 344 - 1670