Lapulapu-Cebu International College (“LCIC,” “we,” “our,” or “us”) is committed to safeguarding personal data and ensuring transparency in how information is processed. This Privacy Policy outlines how we collect, use, disclose, store, and protect personal data in accordance with:

• Republic Act No. 10173 (Data Privacy Act of 2012)
• Applicable international data protection principles, including the General Data Protection Regulation (GDPR) (where applicable)
• ISO/IEC 27701 Privacy Information Management standards

By accessing our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to all personal data collected through:

• Our official website
• Student admissions and enrollment processes
• Academic and administrative services
• Communication channels (online and offline)

2. Categories of Personal Data

2.1 Personal Identification Data

• Name, address, email, and contact details
• Date of birth, gender, nationality, civil status
• Student identification numbers

2.2 Academic and Institutional Data

• Educational records, transcripts, certifications
• Enrollment and academic performance data

2.3 Financial Data

• Payment records, billing details, scholarships, and financial aid information

2.4 Technical and Usage Data

• IP address, browser type, operating system
• Website interaction data (pages visited, session duration)
• Cookies and tracking identifiers

2.5 Sensitive Personal Data

Where necessary and with explicit consent or legal basis:

• Health and medical information
• Government-issued identifiers
• Religious affiliation (where program-related)

3. Legal Bases for Processing

• Consent – where you have given clear permission
• Contractual Necessity – to fulfill enrollment or service obligations
• Legal Obligation – compliance with laws and regulatory authorities
• Legitimate Interests – for institutional operations, security, and service improvement, provided such interests do not override your rights

4. Purposes of Processing

Personal data is processed for the following purposes:

• Administration of admissions, enrollment, and academic services
• Provision of educational instruction and student support
• Issuance of academic records and certifications
• Financial management, billing, and scholarship processing
• Communication of institutional updates and notices
• Compliance with regulatory and accreditation requirements
• Website optimization and analytics
• Security monitoring and fraud prevention
• Marketing and promotional communications (subject to consent)

5. Data Sharing and Disclosure

We may disclose personal data to:

• Authorized service providers (IT systems, cloud services)
• Financial institutions and payment processors
• Government agencies and regulatory bodies
• Academic partners and affiliated institutions
• Professional advisors (legal, audit, compliance)

All third-party processors are required to implement appropriate data protection measures consistent with applicable laws and standards.

We do not sell personal data.

6. International Data Transfers

Where personal data is transferred outside the Philippines, we ensure appropriate safeguards are implemented, such as:

• Data processing agreements
• Standard contractual clauses
• Secure data transfer mechanisms

7. Data Retention

Personal data is retained only for as long as necessary to fulfill its purpose or comply with legal obligations.

Retention periods include:

• Academic records: as required by regulatory authorities
• Financial data: in accordance with tax and accounting laws
• Communication data: as necessary for operational purposes

Data is securely disposed of, anonymized, or archived when no longer required.

8. Data Security Measures

We implement appropriate technical and organizational measures, including:

• Encryption (SSL/TLS)
• Access control and authentication systems
• Data minimization and role-based access
• Regular security assessments and audits
• Staff training on data protection
• Incident response and breach management procedures

9. Your Data Subject Rights

Subject to applicable laws, you have the following rights:

• Right to be Informed
• Right of Access
• Right to Rectification
• Right to Erasure (“Right to be Forgotten”)
• Right to Restrict Processing
• Right to Object
• Right to Data Portability
• Right to Withdraw Consent
• Right to Lodge a Complaint

Requests may be submitted to our Data Privacy Officer and will be handled within legally prescribed timeframes.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Ensure website functionality
• Analyze usage and performance
• Personalize user experience
• Support marketing efforts

Users may manage cookie preferences through browser settings or website controls.

11. Children’s Data Protection

We recognize the importance of protecting minors:

• Personal data of individuals under 18 is processed only with parental or guardian consent
• Parents/guardians may exercise rights on behalf of minors
• Unauthorized collection of children’s data will be promptly addressed

12. Data Breach Notification

In the event of a personal data breach, LCIC will:

• Notify the National Privacy Commission within the required period
• Inform affected individuals without undue delay
• Implement corrective and preventive measures
• Document and investigate the incident

13. Policy Updates

We reserve the right to update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements.
Updates will be published on this page with a revised “Last Updated” date. Where required, we will notify you and obtain consent.

14. Contact Information

For inquiries or requests regarding this Privacy Policy:

You also have the right to lodge a complaint with the National Privacy Commission:
https://www.privacy.gov.ph