Privacy Notice

Divine Grace School (“the School”) recognizes the importance of protecting the privacy and confidentiality of personal information entrusted to it. In compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and other issuances of the National Privacy Commission (NPC), the School is committed to ensuring that all personal information under its custody is collected, processed, stored, retained, and disposed of in a lawful, fair, transparent, and secure manner.

Collection and Processing of Personal Information

The School collects and processes personal information necessary for the performance of its educational, administrative, contractual, and legal obligations. Personal information may be collected manually through paper-based forms or electronically through the School's website, online portals, learning management systems, mobile applications, email communications, and other authorized information and communication systems.

Applicants, Students, Parents, Guardians, and Alumni

The School collects and processes personal information necessary for admission, enrollment, student services, academic instruction, assessment, guidance and counseling, health and wellness services, library services, financial transactions, scholarship administration, extracurricular activities, graduation, alumni relations, and other legitimate educational purposes.

The information collected may include, but is not limited to:

  • Personal identification information;
  • Contact information;
  • Academic and educational records;
  • Attendance and disciplinary records;
  • Financial and billing information;
  • Health information when required by law or necessary to provide educational or health-related services;
  • Photographs, audio and video recordings taken during official school activities; and
  • Other information necessary to fulfill the School's educational mandate and legal obligations.

Personal information shall be processed only by authorized School officials, faculty members, employees, and personnel who require access in the performance of their official duties and responsibilities.

Employees, Faculty Members, and School Personnel

The School likewise collects and processes personal information relating to employment, recruitment, appointment, payroll administration, benefits, performance evaluation, training, professional development, compliance with labor laws, government reporting, security, and other legitimate employment-related purposes.

Employment records and supporting credentials may be collected during recruitment, throughout the duration of employment, and retained after separation from service for the period prescribed by applicable laws, regulations, and the School's Records Retention Schedule.

Disclosure and Sharing of Personal Information

The School shall not disclose personal information to third parties except when:

  • Required or authorized by law;
  • Necessary for the performance of a contract or legal obligation;
  • Necessary to protect the vital interests of the data subject;
  • Necessary for the performance of public authority;
  • Authorized by the data subject through valid consent, when consent is the appropriate legal basis; or
  • Necessary for the legitimate interests pursued by the School, provided that such interests are not overridden by the fundamental rights and freedoms of the data subject.

The School may disclose or submit relevant personal information to:

  • The Department of Education (DepEd);
  • The Commission on Higher Education (CHED), when applicable;
  • The Technical Education and Skills Development Authority (TESDA), when applicable;
  • The Professional Regulation Commission (PRC), when applicable;
  • Government agencies and regulatory authorities;
  • Scholarship providers;
  • Accreditation agencies;
  • Examination providers;
  • Financial institutions;
  • Insurance providers;
  • Service providers engaged by the School under appropriate data sharing or outsourcing agreements; and
  • Other entities as required or permitted by law.

All disclosures shall be limited only to information necessary for the specific lawful purpose.

Website, Online Services, and Cookies

The School's website and other official online platforms may use cookies and similar technologies to enhance user experience, improve website functionality, maintain security, facilitate authentication, manage user sessions, analyze website performance, and generate statistical reports.

Cookies are small text files stored on a user's device by the web browser. Users may configure their browser settings to refuse or delete cookies; however, doing so may affect the functionality of certain features of the School's online services.

The School may also utilize third-party service providers for website hosting, analytics, communication, cloud storage, and learning management systems. These providers are required to implement appropriate safeguards consistent with applicable data privacy laws.

CCTV Monitoring and Campus Security

To ensure the safety and security of students, employees, visitors, and school property, the School operates Closed-Circuit Television (CCTV) systems within designated areas of its campuses and facilities.

The School may also collect visitor information through visitor logbooks, visitor management systems, gate access records, identification cards, photographs, vehicle information, and similar security measures.

Information collected through these security systems shall be used solely for security, safety, incident investigation, law enforcement requests, and other legitimate purposes permitted by law.

Data Retention and Disposal

Personal information shall be retained only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal, regulatory, contractual, and institutional requirements, or as otherwise permitted by applicable laws.

Upon expiration of the applicable retention period, personal information shall be securely disposed of or anonymized using appropriate physical, organizational, and technical safeguards to prevent unauthorized access, disclosure, alteration, loss, destruction, or misuse.

Security Measures

The School implements reasonable and appropriate organizational, physical, and technical security measures to protect personal information against accidental or unlawful destruction, alteration, disclosure, misuse, unauthorized access, or any other unlawful processing.

These safeguards include, among others:

  • Access controls based on authorized roles;
  • Confidentiality obligations of employees and service providers;
  • Secure information systems and databases;
  • Password protection and authentication mechanisms;
  • Encryption and backup procedures where appropriate;
  • Physical security controls for records and equipment;
  • Staff awareness and privacy training; and
  • Regular review of information security policies and procedures.

Rights of Data Subjects

Subject to the conditions and limitations provided under the Data Privacy Act of 2012, data subjects have the right to:

  • Be informed regarding the processing of their personal information;
  • Access their personal information;
  • Object to the processing of their personal information where applicable;
  • Correct inaccurate or incomplete personal information;
  • Suspend, withdraw, or order the blocking, removal, or destruction of personal information under circumstances allowed by law;
  • Obtain a copy of their personal information in a portable format where applicable;
  • File a complaint with the National Privacy Commission; and
  • Claim damages when their rights under the Data Privacy Act have been violated.

Requests relating to these rights shall be evaluated and processed in accordance with applicable laws and School policies.

Contact Information

For inquiries, requests concerning your personal information, or concerns regarding the School's data protection practices, you may contact the School's Data Protection Officer through:

Data Protection Officer
Divine Grace School
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

The School is committed to continually reviewing and improving its data protection policies and practices to ensure compliance with the Data Privacy Act of 2012, its Implementing Rules and Regulations, and issuances of the National Privacy Commission.