Privacy Policy — MCC Event & Portfolio Organizer

1. Overview

This Privacy Policy explains how the MCC Event and Portfolio Organizer System ("the System") collects, uses, stores, and protects personal information belonging to students, faculty, and staff of Madridejos Community College who use the System for event management, attendance tracking, and portfolio organization.

This policy is written to align with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). It is a template — have it reviewed before you publish it as your school's official policy.

2. Information We Collect

Category	Examples
Account details	Full name, email address, ID number, department/program
Attendance data	QR scan timestamps, event check-in/check-out logs
Portfolio content	Uploaded documents, images, and certificates
Technical data	Login timestamps, device/browser type, IP address

3. How We Use Your Information

To create and manage your account and verify your identity
To record attendance at campus events through QR-based scanning
To generate certificates and maintain your event portfolio
To send updates about events, deadlines, or system changes
To maintain the security and integrity of the System

4. How We Protect Your Data

Access to attendance and account records is restricted to authorized administrators. Passwords are stored using industry-standard hashing, and QR codes used for attendance carry a limited validity window before expiring. While we take reasonable technical and organizational measures to protect your data, no system can guarantee absolute security.

5. Sharing of Information

We do not sell or rent personal data to third parties. Information may only be shared:

With college administrators for legitimate academic or event-management purposes
When required by law, court order, or government regulation
With your explicit consent

6. Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to:

Be informed about how your data is processed
Access a copy of the personal data we hold about you
Request correction of inaccurate or outdated data
Object to or request suspension of certain processing
Request deletion of your data, subject to record-keeping requirements

7. Data Retention

Account, attendance, and portfolio records are retained for as long as your account remains active and for a reasonable period afterward, in line with the College's academic record-keeping requirements. You may request early deletion of your data by contacting the administrator, subject to legal or institutional retention obligations.

8. Contact Us About Privacy

For questions, concerns, or requests regarding your personal data, please contact:

Email: events@gmail.com
Subject Line: Data Privacy Inquiry