Privacy Policy

Effective Date: July 1, 2025


1) Personal Data We Collect

We may collect the following categories, as applicable:

  • Identity & Contact: name, photo, signature, date/place of birth, sex, nationality, civil status, student/employee ID, address, email, mobile/telephone.

  • Academic & School Records: admission forms, test results, prior school records, grades, class schedules, attendance, disciplinary records, guidance notes (as permitted by law), scholarship data, honors/awards.

  • Family/Guardian Information: name, relationship, contact details, emergency contacts.

  • Financial & Billing: tuition/fees, payment records, scholarship/financial aid applications, bank account details (if provided), receipts, official documents.

  • Employment (for staff & applicants): résumé/CV, credentials, background verification results, evaluations, timekeeping and payroll information.

  • IT & Device Data: IP address, device identifiers, cookies, browsing data, app usage, access logs to school systems/Wi-Fi.

  • Campus Safety & Facilities: CCTV footage, visitor logs, incident reports, medical/clinic entries related to first aid or school health services.

  • Photos/Audio/Video: documentation of classes, events, competitions, worship/formation activities, and marketing materials (with appropriate consent).

  • Special Categories (processed only when lawful and necessary): health information for school health services, guidance/counseling notes, and government IDs.

2) How We Collect Data

  • Directly from you: forms (online and paper), emails, calls, chats, admissions/registrar windows, HR, clinic, guidance, libraries, events, surveys.

  • From parents/guardians: when required for minors or for emergency purposes.

  • From school systems and devices: LMS/portal usage, website cookies/analytics, access control, Wi-Fi logs.

  • From third parties: previous schools, scholarship sponsors, partner companies for OJT/internship, background verification providers, government agencies when legally required.

3) Purposes of Processing (Why We Use Your Data)

We process personal data for the following specific, legitimate purposes:

  • Admissions & Enrollment: evaluate applications, verify credentials, create student records.

  • Academic Delivery: scheduling, instruction, assessment, grading, advising, guidance and counseling, learning management systems, library services.

  • Student Affairs & Formation: chapel/formation programs, student organizations and activities, sports, leadership and community engagement.

  • Safety & Security: campus access, CCTV monitoring, incident response, emergency alerts, health clinic and contact tracing as permitted by law.

  • Administrative & Legal: billing/collections, accounting/audit, compliance with CHED, DepEd (for High School), TESDA (if applicable), and other regulators; reporting to government when required.

  • Employment & HR: recruitment, appointment, performance management, payroll/benefits, statutory reporting.

  • Alumni Relations & Marketing: maintain alumni database, send school news and event invitations, publish yearbooks and school achievements (subject to opt-out/consent where required).

  • Research & Quality Assurance: surveys, program reviews, accreditation, analytics for service improvement (using aggregated/anonymized forms when possible).

  • Website & Systems: operate and secure our websites, portals, and networks; measure usage and improve user experience.

  • Legal Claims: establish, exercise, or defend legal claims and enforce school policies.

4) Lawful Bases for Processing

Depending on the context, we rely on one or more of the following bases under the Data Privacy Act:

  • Consent (e.g., optional marketing materials, public posting of student photos, alumni features).

  • Contractual necessity (e.g., enrollment/tuition processing, employment).

  • Legal obligation (e.g., regulatory reports, tax and accounting records).

  • Vital interests (e.g., medical emergencies, safety/security matters).

  • Public task/authority or legitimate interests (e.g., campus safety via CCTV; service improvement via non-intrusive analytics)—balanced against your rights.

For minors, we obtain consent from the parent or legal guardian when required by law.

5) Data Sharing & Disclosure

We may share personal data with:

  • Internal recipients: authorized school offices (Admissions, Registrar, Academics, Student Affairs/Guidance, Finance, HR, IT, Security).

  • Service providers (“data processors”): cloud hosting, student information systems, learning platforms, SMS/email gateways, payment processors, ID printing, document storage, auditing—bound by data processing agreements and security measures.

  • Partner institutions/companies: internship/OJT placement, competitions, exchange programs—limited to necessary data.

  • Government & regulators: CHED, DepEd (High School), PRC, TESDA, DOH/LGUs (as applicable), courts/law enforcement—only when legally required.

  • Publications/Media: honor rolls, graduation programs, event photos, press releases—subject to consent/opt-out rules.

  • In emergencies or as required by law.

We do not sell personal data.

6) Cross-Border Transfers

When systems or providers store data outside the Philippines, we ensure appropriate safeguards (contractual clauses, encryption, access controls) consistent with NPC guidance and applicable laws.

7) Data Retention

We retain personal data only for as long as necessary for the stated purposes, or as required by law/legitimate business needs, then securely delete or anonymize it.

Typical retention (subject to school schedules and legal requirements):

  • Student permanent records & transcripts: long-term/permanent archival.

  • Admission files of non-enrolled applicants: up to 2 years.

  • Financial & accounting records: 10 years from transaction date.

  • CCTV footage: typically 30–60 days unless needed for an investigation.

  • Clinic logs & incident reports: as required by health/safety regulations.

  • HR/employment files: for the term of employment + statutory periods.

8) Your Rights as a Data Subject

Under RA 10173, you have the right to:

  • Be informed of processing activities.

  • Object to processing (when based on consent or legitimate interests).

  • Access and rectify your personal data.

  • Erase or block (subject to legal and contractual limitations).

  • Data portability (when technically feasible).

  • Damages and file a complaint with the National Privacy Commission.

To exercise your rights, please contact our Data Protection Officer (DPO) (see Section 12). We may need to verify your identity and request supporting documents.

9) Security Measures

We implement organizational, physical, and technical safeguards appropriate to the risks, including role-based access, encryption and secure transmission, authentication, logging/monitoring, staff training, privacy impact assessments for new systems, and vendor due diligence.

10) Cookies, Analytics, and Digital Communications

  • Our websites and portals use cookies and similar technologies to operate the site, remember preferences, and analyze traffic. You may control cookies through your browser settings; disabling some cookies may affect functionality.

  • We may use analytics tools to collect de-identified usage data.

  • If you provide your contact details for updates, we may send you email/SMS/phone messages about admissions, scholarships, events, or campus advisories. You may opt out at any time through the unsubscribe link or by contacting us.

11) Third-Party Links

Our sites may link to external websites. We are not responsible for the privacy practices of those sites. Please review their policies.

12) How to Contact Us (and Our DPO)

Hercor College Inc.
Km. 1 Lawaan Hills, Roxas Avenue Ext., Roxas City, Philippines
Phone: +63 (36) 621 6896
Email (DPO): [email protected]

For concerns, requests, or complaints, email the DPO with your name, contact details, description of the request, and any supporting documents. You may also contact the National Privacy Commission (privacy.gov.ph) for further assistance.

13) Children’s Privacy

We process minors’ data with the knowledge and, where required, consent of parents/guardians and in the best interests of the child. Parents/guardians may review, correct, or request updates to their child’s information through official channels.

14) Changes to this Policy

We may update this Policy to reflect changes in laws or our practices. Significant changes will be posted on our website and, when appropriate, communicated via email or campus announcements. The “Last Updated” date shows the latest version.