IETI Marikina College of Science and Technology

Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how IETI Marikina College of Science & Technology, Inc. (“IETI Marikina”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information through the IETI Marikina Online Portal (“Portal”). We process personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, issuances of the National Privacy Commission (NPC), and applicable school policies.

1. Information we collect

Depending on your role, we may process:

  • Account data — email address, username, password (stored in hashed form), and role;
  • Student records — student number, name, contact details, address, birthday, gender, guardian information, program and section details, schedules, grades, and promotion or term outcome records;
  • Staff records — name, contact details, employment-related portal profile information, teaching assignments, and availability;
  • Communications — in-app messages and conversations, announcements you post, issue reports you submit (including optional screenshots), and notifications sent to you;
  • Technical and security data — IP address (used when verifying a bot-protection challenge), login timestamps, active session information, and device/browser details needed for security and troubleshooting;
  • Audit records — logs of sensitive actions in the Portal, such as who viewed or updated a student profile, imported or exported student data, changed role permissions, or approved, unlocked, or published grades;
  • Uploaded files — profile images, import spreadsheets, announcement images, or other documents you or authorized staff submit through the Portal.

2. How we use information

We use personal information to:

  • Authenticate users and manage Portal access, including monitoring currently signed-in accounts;
  • Deliver academic and administrative services (student information, scheduling, grading, promotions, and related workflows);
  • Operate in-app messaging, announcements, class reminders, and notifications;
  • Receive and respond to issue reports and support requests;
  • Send account-related notices such as password resets, lockout alerts, or login credentials when authorized;
  • Maintain security, prevent misuse, keep an audit trail of sensitive actions, and investigate unauthorized access;
  • Comply with school policies, accreditation needs, and legal obligations.

3. Legal basis / legitimate purpose

Processing is generally necessary for educational and institutional operations, the contract or relationship with students and personnel, compliance with law, and legitimate interests in securing and operating the Portal, consistent with RA 10173 and school privacy policies. Where consent is the basis (for example, optional features), you may withdraw it through the school’s official channels, subject to legal and institutional requirements.

4. Sharing of information and service providers

We do not sell personal information. Data may be shared only with:

  • Authorized IETI Marikina personnel who need it for their official duties;
  • Government agencies or other parties when required by law or lawful order;
  • Service providers (personal information processors) that help us operate the Portal, under contracts or terms that require appropriate safeguards. These currently include:
    • Amazon Web Services (S3) — storage of uploaded files such as profile images, import spreadsheets, announcement images, and issue-report screenshots;
    • Google reCAPTCHA or Cloudflare Turnstile — bot protection on the login page after repeated failed attempts; these services receive your IP address and browser information;
    • Email delivery provider (SMTP) — sends account and notification emails to the address on file;
    • Logging and monitoring infrastructure — operational logs used for troubleshooting and security.

5. Cross-border transfer of data

Some service providers store or process data outside the Philippines. In particular, uploaded files are stored in Amazon Web Services’ Asia Pacific (Sydney, Australia) region, and bot-protection on the login page is processed by providers that operate globally. Core academic records (accounts, student and staff records, grades, schedules, messages, and audit logs) are kept in databases controlled by IETI Marikina. Where data leaves the Philippines, we rely on provider contracts and security commitments to ensure a level of protection consistent with RA 10173.

6. Data storage and retention

Information is stored in systems controlled or contracted by IETI Marikina (including databases and, where used, cloud storage for files). Academic records are retained for as long as needed for academic, administrative, archival, or legal purposes, then disposed of according to school retention rules. Active-session records are removed shortly after you sign out or your session expires. Security audit logs and operational logs are retained for a limited period sufficient for security review and investigation, then purged or archived under school policy.

7. Security measures

We use reasonable administrative, technical, and organizational measures to protect personal data, including authenticated access, role-based permissions, password hashing, login lockout and bot protection, and audit logging of sensitive actions. No online system is completely risk-free; please protect your credentials and sign out on shared devices.

8. Data breach notification

If a personal data breach occurs that is likely to give rise to a real risk of serious harm, IETI Marikina will notify the National Privacy Commission and affected individuals within the period required by RA 10173 and NPC issuances (generally within 72 hours of knowledge of the breach), and will describe the nature of the breach, the data involved, and the measures taken.

9. Your rights

Under the Data Privacy Act, you have the right to be informed, to access, to correct, to object, to erasure or blocking (where applicable), to data portability, to damages, and to file a complaint with the National Privacy Commission. For Portal account or record corrections, contact the Registrar or the appropriate school office. Privacy-related requests and concerns may be directed to the school’s Data Protection Officer:

  • Data Protection Officer, IETI Marikina College of Science & Technology, Inc.
  • 34 Lark Street, Brgy. Sta. Elena, Marikina City
  • Email: dpo@ieti-marikina.edu.ph (or through the school’s official channels)

10. Cookies and local session data

The Portal uses session and authentication cookies needed to keep you signed in, protect forms against forgery, and operate securely. These are used for functionality and security, not for third-party advertising.

11. Students and minors

The Portal primarily serves college-level students and school personnel. Where the school enables Senior High School or other programs, the Portal may process personal data of students below 18 years of age. For such students, Portal access is arranged with the consent of a parent or legal guardian, whose contact details are also recorded. Student personal data is processed only for educational purposes and is accessible only to authorized users based on role.

12. Changes to this Policy

We may update this Privacy Policy periodically. The “Last updated” date shows the latest revision. Continued use of the Portal after updates means you acknowledge the revised Policy.

13. Contact

For privacy questions or requests related to the Portal, contact the Data Protection Officer or IETI Marikina College of Science & Technology, Inc., 34 Lark Street, Brgy. Sta. Elena, Marikina City, through official school channels.

Back to login

Back to login · Terms of Service · Privacy Policy