Privacy Policy

1.0 Introduction

The B-Smart Portal ("the Portal") is a school management system developed by **Daniela Dev Corp** specifically for **Buayan National High School**. We are committed to protecting the privacy and security of the personal information of our students, teachers, and staff. This Privacy Policy outlines how we collect, use, and safeguard data in compliance with the **Philippine Data Privacy Act of 2012 (RA 10173)**, **DepEd Order No. 40, s. 2012 (Child Protection Policy)**, and relevant international standards.

2.0 Collection of Data

We collect only the minimum necessary information required to provide our educational management services:

• Personal Information: Full name, Email address, Employee ID (for Teachers), and Learner Reference Number (LRN) (for Students).
• Academic Data: Academic grades, assessments, and class assignments.
• Operational Data: Attendance timestamps and check-in/out records.
• System Data: Google OAuth authentication data (limited to profile information required for identity verification).

3.0 Use of Google User Data

B-Smart Portal uses Google OAuth for secure authentication. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.0 Purpose of Processing

Data is processed for the following educational and administrative purposes:

• Facilitating the enrollment and grading processes.
• Generating DepEd-required reports (SF9, SF10, etc.).
• Monitoring student attendance and safety.
• Ensuring secure access to school resources.

5.0 Data Retention and Storage

All data is stored securely using industry-standard encryption via Supabase. In accordance with DepEd records management policies, data is retained only as long as:

• The student is actively enrolled at Buayan National High School.
• The teacher or staff member remains employed or associated with the institution.
• Necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

6.0 Child Protection and Minor Privacy

Adhering to DepEd Order No. 40, s. 2012, we recognize the sensitive nature of student data. Information regarding minors is accessed only by authorized school personnel (Advisers, Subject Teachers, and Administrators) with a legitimate educational interest. We do not expose minor data to the public internet or unauthorized third parties.

7.0 Rights of the Data Subject

Under the DPA 2012, you have the following rights regarding your personal data:

• Right to be Informed: Knowing how your data is being used.
• Right to Access: Requesting a copy of your personal data held by the Portal.
• Right to Rectification: Correcting any errors in your personal information.
• Right to Erasure/Blocking: Requesting the removal of your data from our systems.