Privacy Policy

Iloilo Doctors' College — College of Business and Technology ("IDC-CBT", "we") operates this grading and student information system. We process personal data under the Data Privacy Act of 2012 (RA 10173), its Implementing Rules, and NPC issuances. Personal information controller: Iloilo Doctors' College — College of Business and Technology, West Timawa Ave, Molo, Iloilo City. Data Protection Officer: [[ Data Protection Officer name & email ]]. Contact: idc.cbtcouncil@gmail.com.

Data we collect

• Account data: full name, email, student ID, hashed password, role, course and year level.
• Academic records: enrollments, grades, attendance and grade-change history. Education records are sensitive personal information under the Act.
• Contact data: mobile number, used for SMS notifications.
• Profile photo, if you upload one.
• Google Sign-In: your Google name, email and account ID, only if you choose that option.
• Technical data: session identifiers and SMS delivery logs.

Why we use it

To run accounts, record and release grades, send grade and school notices, generate report cards, and keep the system secure. Processing is based on your consent (where you give it) and on IDC-CBT's legitimate school functions and legal obligations. We do not sell personal data and do not use it for advertising.

Who receives it

• iProgSMS (SMS delivery): receives your mobile number and message text.
• Google (Sign-In and Google Fonts): see the Cookie Policy.
• Our web hosting provider: [[ confirm host and data location ]].
• Authorized IDC staff, on a need-to-know basis. Other disclosures only where the law requires.

Retention

[[ retention period per IDC records policy ]]. Data is then deleted or anonymized unless the law requires longer retention.

Your rights

You may be informed, access, correct, object, request erasure or blocking, withdraw consent, request a portable copy, claim damages for unlawful processing, and complain to the National Privacy Commission (privacy.gov.ph). Write to idc.cbtcouncil@gmail.com. Withdrawing consent for SMS will not affect your access to grades in the portal.

Security and breaches

We use password hashing and access controls. If a breach likely puts you at risk, we notify the NPC and affected persons within 72 hours of knowledge, as required.

Minors

If you are under 18, a parent or guardian's consent may be required for optional processing such as SMS. [[ IDC to confirm process ]].

Last updated: [[ effective date ]]